且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

Rails默认的CSRF元标记未通过验证

更新时间:2023-12-01 20:01:40

您不必为此担心。 HTML5元标记使用起来非常开放。验证的全部依据是,按照W3C规范,从技术上讲,这些并不是合法 HTML5元数据名称,但不会影响功能。以下是meta标签的建议扩展列表:

You shouldn't really worry about this. The HTML5 meta tag is pretty open with its use. All this validation is saying is that those technically aren't "legal" HTML5 metadata names according to the W3C spec, but it will not affect functionality. Here's a list of the proposed extensions for the meta tag:

http://wiki.whatwg.org/wiki/MetaExtensions

csrf-token和csrf-param已在建议列表中状态。如果将这些内容添加到W3C规范中,您就不会再看到此验证错误。

csrf-token and csrf-param are already on the list in "Proposal" status. If these get added to the W3C spec you shouldn't see this validation error anymore.