|
4 | 4 | #
|
5 | 5 | # Read the Rails 5.0 release notes for more info on each option.
|
6 | 6 |
|
7 |
| -# Enable per-form CSRF tokens. Previous versions had false. |
8 |
| -Rails.application.config.action_controller.per_form_csrf_tokens = true |
| 7 | +if Rails.version > '5.0' |
| 8 | + # Enable per-form CSRF tokens. Previous versions had false. |
| 9 | + Rails.application.config.action_controller.per_form_csrf_tokens = true |
9 | 10 |
|
10 |
| -# Enable origin-checking CSRF mitigation. Previous versions had false. |
11 |
| -Rails.application.config.action_controller.forgery_protection_origin_check = true |
| 11 | + # Enable origin-checking CSRF mitigation. Previous versions had false. |
| 12 | + Rails.application.config.action_controller.forgery_protection_origin_check = true |
12 | 13 |
|
13 |
| -# Make Ruby 2.4 preserve the timezone of the receiver when calling `to_time`. |
14 |
| -# Previous versions had false. |
15 |
| -ActiveSupport.to_time_preserves_timezone = true |
| 14 | + # Make Ruby 2.4 preserve the timezone of the receiver when calling `to_time`. |
| 15 | + # Previous versions had false. |
| 16 | + ActiveSupport.to_time_preserves_timezone = true |
16 | 17 |
|
17 |
| -# Require `belongs_to` associations by default. Previous versions had false. |
18 |
| -Rails.application.config.active_record.belongs_to_required_by_default = true |
| 18 | + # Require `belongs_to` associations by default. Previous versions had false. |
| 19 | + Rails.application.config.active_record.belongs_to_required_by_default = true |
19 | 20 |
|
20 |
| -# Do not halt callback chains when a callback returns false. Previous versions had true. |
21 |
| -ActiveSupport.halt_callback_chains_on_return_false = false |
| 21 | + # Do not halt callback chains when a callback returns false. Previous versions had true. |
| 22 | + if Rails.version < '5.2' |
| 23 | + ActiveSupport.halt_callback_chains_on_return_false = false |
| 24 | + end |
22 | 25 |
|
23 |
| -# Configure SSL options to enable HSTS with subdomains. Previous versions had false. |
24 |
| -Rails.application.config.ssl_options = { hsts: { subdomains: true } } |
| 26 | + # Configure SSL options to enable HSTS with subdomains. Previous versions had false. |
| 27 | + Rails.application.config.ssl_options = { hsts: { subdomains: true } } |
| 28 | +end |
0 commit comments