[Rails-core] Re: HttpOnly cookies by default

2014-05-16 Thread fedesoria
I would like to see this happen, since when dealing with Enterprise Vulnerability Scans it always comes up. On Monday, January 7, 2013 2:09:42 PM UTC-8, Stephen Touset wrote: > > Earlier, someone proposed on the GH issues tracker that Rails default all > cookies to HttpOnly[1]. Rails already mak

[Rails-core] Routing path order of verbs

2012-08-15 Thread fedesoria
Hi, I found a little confusing how this works, let me know if there's a reasoning for this: In theory all routes paths follow this structure resource_action_path and this works great except for the following action: resources :photos do get 'view' end which results in photo_view_path havin