What are some examples of CSRF protection in Rails?

What are some examples of CSRF protection in Rails?

In Rails, CSRF protection is enabled by default. You can use the protect_from_forgery method in your controllers.

Can you show me a code example?

Sure! Here's a simple example:

class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
end

What happens if CSRF protection is not enabled?

If CSRF protection is not enabled, your application may be vulnerable to CSRF attacks, allowing unauthorized actions.

How can I test if CSRF protection is working?

You can test it by trying to submit a form without the CSRF token and checking if it raises an error.