Use rack.session_options instead of directly change env

rails · Sep 15, 2015 · 1fd9922 · 1fd9922
1 parent 49316d8
commit 1fd9922
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/actionpack/lib/action_controller/metal/request_forgery_protection.rb b/actionpack/lib/action_controller/metal/request_forgery_protection.rb
@@ -138,7 +138,7 @@ def handle_unverified_request
           request = @controller.request
           request.session = NullSessionHash.new(request)
           request.flash = nil
-          request.env['rack.session.options'] = { skip: true }
+          request.session_options = { skip: true }
           request.cookie_jar = NullCookieJar.build(request, {})
         end