Comment out csrf_meta_tags

Per https://github.com/OWASP/railsgoat/wiki/R4-A8-CSRF this line should be commented out for the developer to fix (by uncommenting it).
2017-07-21 09:15:06 -04:00
parent 84d998d432
commit e8da858e0e
1 changed files with 1 additions and 1 deletions
@@ -4,7 +4,7 @@
  <title>RailsGoat</title>
  <%= stylesheet_link_tag    "application", media: "all", "data-turbolinks-track" => true %>
  <%= javascript_include_tag "application", "data-turbolinks-track" => true %>
-  <%= csrf_meta_tags %> <!-- <~ What is this for? I hear it helps w/ JS and Sea-surfing.....whatevz -->
+  <%#= csrf_meta_tags %> <!-- <~ What is this for? I hear it helps w/ JS and Sea-surfing.....whatevz -->
  <!-- bootstrap css -->
 <%
 if cookies[:font]