Contents

# frozen_string_literal: true

module Quilt
  class TrustedUiServerCsrfStrategy
    def initialize(controller)
      @controller = controller
    end

    def handle_unverified_request
      return if node_server_side_render?

      fallback_handler.handle_unverified_request
    end

    private

    def node_server_side_render?
      @controller.request.headers["x-shopify-server-side-rendered"] == "1"
    end

    def fallback_handler
      ActionController::RequestForgeryProtection::ProtectionMethods::Exception.new(@controller)
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
quilt_rails-3.6.0	lib/quilt_rails/trusted_ui_server_csrf_strategy.rb
quilt_rails-3.5.6	lib/quilt_rails/trusted_ui_server_csrf_strategy.rb