lib/generators/graphql/templates/graphql_controller.erb in graphql-1.9.14 vs lib/generators/graphql/templates/graphql_controller.erb in graphql-1.9.15

@@ -1,9 +1,9 @@
 class GraphqlController < ApplicationController
   # If accessing from outside this domain, nullify the session
   # This allows for outside API access while preventing CSRF attacks,
   # but you'll have to authenticate your user separately
-  protect_from_forgery with: :null_session
+  # protect_from_forgery with: :null_session
 
   def execute
     variables = ensure_hash(params[:variables])
     query = params[:query]
     operation_name = params[:operationName]