# Auto complete plugin and CSRF protection-- do you care?

**URL:** <https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092>\
**Category:** Rails\
**Created:** [October 23, 2007, 8:45pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092 "2007-10-23T20:45:52Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [October 23, 2007, 8:45pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/1 "2007-10-23T20:45:52Z")

</div>

Hi,

I just noticed that the auto\_complete plugin does not work with the  
CSRF protection in Rails 2.0. I’ve patched the plugin, but I’m  
wondering if people would like to see the official plugin fixed. If  
so, speak up and I will write some tests and submit the patch.

Krishna

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [October 23, 2007, 9:05pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/2 "2007-10-23T21:05:45Z")

</div>

On 23 Oct 2007, at 19:44, Krishna D. wrote:

> Hi,
> 
> I just noticed that the auto\_complete plugin does not work with the  
> CSRF protection in Rails 2.0. I’ve patched the plugin, but I’m  
> wondering if people would like to see the official plugin fixed. If  
> so, speak up and I will write some tests and submit the patch.

Please do - we haven’t moved to 2.0 yet but it would be silly for us  
to have to duplicate your work when we do !

Fred

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [October 23, 2007, 9:29pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/3 "2007-10-23T21:29:47Z")

</div>

On Oct 23, 2007, at 8:44 PM, Krishna D. wrote:

> I just noticed that the auto\_complete plugin does not work with the  
> CSRF protection in Rails 2.0. I’ve patched the plugin, but I’m  
> wondering if people would like to see the official plugin fixed. If  
> so, speak up and I will write some tests and submit the patch.

Please!

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [October 25, 2007, 5:46am UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/4 "2007-10-25T05:46:16Z")

</div>

I’m interested

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [December 11, 2007, 12:50pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/5 "2007-12-11T12:50:39Z")

</div>

On 10 Dec 2007, at 16:49, Krishna D. wrote:

> Several people expressed interest in this patch-- I’m still looking  
> for two +1s. [http://dev.rubyonrails.org/ticket/10059](http://dev.rubyonrails.org/ticket/10059)

You’ve got mine. Worth checking out #rails-contrib on irc, or the  
rails-core mailing list if you need more.

Fred

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [December 12, 2007, 9:46pm UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/6 "2007-12-12T21:46:14Z")

</div>

Several people expressed interest in this patch-- I’m still looking  
for two +1s. [http://dev.rubyonrails.org/ticket/10059](http://dev.rubyonrails.org/ticket/10059)

Krishna

---

<div class="post-metadata">

**Author:** ![kpd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/df788c/32.png) [@kpd](https://www.ruby-forum.com/u/kpd)\
**Post date:** [November 2, 2007, 8:25am UTC](https://www.ruby-forum.com/t/auto-complete-plugin-and-csrf-protection-do-you-care/118092/7 "2007-11-02T08:25:51Z")

</div>

Hi all,

Sorry for the delay. I finally got around to submitting the patch–  
comments and criticism welcome:

[http://dev.rubyonrails.org/ticket/10059](http://dev.rubyonrails.org/ticket/10059)

Krishna