Is Rails 2.1 "protect_from_forgery" == csrf_killer plugin?

Rails
1

Just would like to verify:

Is protect_from_forgery (in Rails 2.1) == the csrf_killer plugin from
Rick O.?

Thanks,
Wes

2

On 6 Sep 2008, at 07:08, Wes G. [email protected]
wrote:

Just would like to verify:

Is protect_from_forgery (in Rails 2.1) == the csrf_killer plugin from
Rick O.?

Yup, it was merged in in rails 2.0

Fred

3

Thanks, Frederick.

Follow - up: Is there anything that precludes using protect_from_forgery
with a DB session store?

Wes

4

On 6 Sep 2008, at 20:04, Wes G. wrote:

Thanks, Frederick.

Follow - up: Is there anything that precludes using
protect_from_forgery
with a DB session store?

nope (you do however need to pass a secret to protect_from_forgery)

Fred

5

Yeah, I just verified that.

Sorry, I should have tested it first.