From 0bf25cd563d38da17c9265570a98bff210044424 Mon Sep 17 00:00:00 2001
From: Luc Donnet
Date: Thu, 29 Jan 2015 16:10:43 +0100
Subject: Fix several problems with devise and use mainstream source now

---
 app/controllers/application_controller.rb | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'app/controllers/application_controller.rb')

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 4359ee02e..63775a30f 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,7 +1,10 @@
 class ApplicationController < ActionController::Base
-  protect_from_forgery
+  # TODO : Delete hack to authorize Cross Request for js and json get request from javascript
+  protect_from_forgery unless: -> { request.get? && (request.format.json? || request.format.js?) }
   before_filter :authenticate_user!
   before_filter :set_locale
+
+  # Load helpers in rails engine
   helper LanguageEngine::Engine.helpers
  
   def set_locale
-- 
cgit v1.2.3