On Tuesday, February 5, 2013 6:19:22 AM UTC, Ruby-Forum.com User wrote:
>
> I am getting following warning while generating model, how to get rid of 
> this warning and what is cause for this warning. I am using rails 3.2.8 
>
>    SECURITY WARNING: No secret option provided to Rack::Session::Cookie. 
>    This poses a security threat. It is strongly recommended that you 
>    provide a secret to prevent exploits that may be possible from 
> crafted 
>    cookies. This will not be supported in future versions of Rack, and 
>    future versions will even invalidate your existing user cookies. 
>
>
Normally you'd have 

YourApplication::Application.config.secret_token = 'long random string'

in an initializer, which rails should then pass through to rack. You can 
use rake secret to generate such a token.

Fred

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msg/rubyonrails-talk/-/MFS7MbQeiUUJ.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to