finalizing CSRF patch, bumping to 10.5

thoughtbot · Apr 19, 2011 · c656d44 · c656d44
1 parent 7c5af12
commit c656d44
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,7 +1,7 @@
-0.10.5 (unreleased)
+0.10.5
 -------------------
 
-* CSRF protection on Rails >= 3.0.4 apps (Mack Earnhardt)
+* Closing CSRF hole for Rails >= 3.0.4 apps (Mack Earnhardt)
 
 0.10.4
 ------------------

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-0.10.4
+0.10.5
diff --git a/lib/clearance/authentication.rb b/lib/clearance/authentication.rb
@@ -94,7 +94,7 @@ def deny_access(flash_message = nil)
 
       # CSRF protection in Rails >= 3.0.4
       # http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails
-      def reset_session
+      def handle_unverified_request
         super
         sign_out
       end