Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
In my node.js express app I’m submitting a form, to an action on a controller.
All this controller does is:
send(req.body)
(I’m using RailwayJS (but that’s not all that important to this question I don’t think)
I’m doing this is to get the values in the form
However, it comes back as ‘Forbidden’
If I restart node, and refresh the page (confirming i want to post back) then I get the desired result…
Any idea how to get the values of the form without restarting?
I think this is related to ‘protect from forgery’ beforeFilter. Do you pass authencity_token to your post?
Possible solution:
skipBeforeFiler('protect from forgery');— it disables CSRF protectionBetter solution: use form_for helper, or pass authencity_token manually. Check apidocs to learn more about CSRF protection: http://jsdoc.info/1602/express-on-railway/helpers.html#instance/csrf_tag