Skip verifying authenticity token

Authenticity token are generated as a hidden field in Whitehall forms. As it is not intended for these POST routes to be called from a form within in the application, these check should be skipped.
alphagov · Nov 5, 2019 · 2ba87a5 · 2ba87a5
1 parent 87898ca
commit 2ba87a5
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/admin/export/document_controller.rb b/app/controllers/admin/export/document_controller.rb
@@ -1,4 +1,5 @@
 class Admin::Export::DocumentController < Admin::Export::BaseController
+  skip_before_action :verify_authenticity_token
   self.responder = Api::Responder
 
   def show