implement form token protection

that was easy
dekellum · Jun 20, 2011 · 353cd7d · 353cd7d
1 parent 8cb2638
commit 353cd7d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/lib/rack/protection/form_token.rb b/lib/rack/protection/form_token.rb
@@ -14,9 +14,10 @@ module Protection
     # since it might be a security issue, depending on your application
     #
     # Compatible with Rails and rack-csrf.
-    #
-    # Not Yet Implemented!
     class FormToken < AuthenticityToken
+      def accepts?(env)
+        env["HTTP_X_REQUESTED_WITH"] == "XMLHttpRequest" or super
+      end
     end
   end
 end