app/controllers/crowdblog/assets_controller.rb in crowdblog-0.0.14 vs app/controllers/crowdblog/assets_controller.rb in crowdblog-0.0.15
- old
+ new
@@ -1,6 +1,10 @@
module Crowdblog
class AssetsController < Controller
+ # TODO: Skipping filters is the worst solution ever to this problem
+ # Someone should fix the uploadify.js thing
+ skip_before_filter :verify_authenticity_token, :only => :create
+ skip_before_filter :authorize!
def create
@post = Post.find(params[:post_id])
asset = @post.assets.build
asset.attachment = params['Filedata']