From 3e716bfa26582f371e46d11cbc6c174b2a09453e Mon Sep 17 00:00:00 2001 From: Rosa Gutierrez Date: Wed, 26 Nov 2025 13:16:44 +0100 Subject: [PATCH] Fix a couple of typos --- app/controllers/concerns/request_forgery_protection.rb | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/app/controllers/concerns/request_forgery_protection.rb b/app/controllers/concerns/request_forgery_protection.rb index 682e88a7d..f11ef8ad0 100644 --- a/app/controllers/concerns/request_forgery_protection.rb +++ b/app/controllers/concerns/request_forgery_protection.rb @@ -2,11 +2,11 @@ module RequestForgeryProtection extend ActiveSupport::Concern included do - after_action :append_set_fetch_site_to_vary_header + after_action :append_sec_fetch_site_to_vary_header end private - def append_set_fetch_site_to_vary_header + def append_sec_fetch_site_to_vary_header vary_header = response.headers["Vary"].to_s.split(",").map(&:strip).reject(&:blank?) response.headers["Vary"] = (vary_header + [ "Sec-Fetch-Site" ]).join(",") end @@ -25,10 +25,10 @@ module RequestForgeryProtection SAFE_FETCH_SITES = %w[ same-origin same-site ] def safe_fetch_site? - SAFE_FETCH_SITES.include?(safe_fetch_site_value) + SAFE_FETCH_SITES.include?(sec_fetch_site_value) end - def safe_fetch_site_value + def sec_fetch_site_value request.headers["Sec-Fetch-Site"].to_s.downcase end @@ -38,7 +38,7 @@ module RequestForgeryProtection unless results.values.all? info = results.transform_values { it ? "pass" : "fail" } info[:origin] += " (#{request.origin})" - info[:sec_fetch_site] += " (#{safe_fetch_site_value})" + info[:sec_fetch_site] += " (#{sec_fetch_site_value})" Rails.logger.info "CSRF protection check: " + info.map { it.join(" ") }.join(", ")