<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for TidyApps</title>
	<atom:link href="http://blog.tidyapps.com/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.tidyapps.com</link>
	<description>Web applications without the fluff</description>
	<lastBuildDate>Fri, 25 Sep 2009 05:14:36 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Sporadic InvalidAuthenticityToken for some users by vlod</title>
		<link>http://blog.tidyapps.com/2009/07/sporadic-invalidauthenticitytoken-for-some-users/comment-page-1/#comment-3169</link>
		<dc:creator>vlod</dc:creator>
		<pubDate>Fri, 25 Sep 2009 05:14:36 +0000</pubDate>
		<guid isPermaLink="false">http://blog.tidyapps.com/?p=63#comment-3169</guid>
		<description>actually this seems to be a good workaround:

http://kill-0.com/duplo/2007/07/12/rails-cookie-detection/</description>
		<content:encoded><![CDATA[<p>actually this seems to be a good workaround:</p>
<p><a href="http://kill-0.com/duplo/2007/07/12/rails-cookie-detection/" rel="nofollow">http://kill-0.com/duplo/2007/07/12/rails-cookie-detection/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Sporadic InvalidAuthenticityToken for some users by vlod</title>
		<link>http://blog.tidyapps.com/2009/07/sporadic-invalidauthenticitytoken-for-some-users/comment-page-1/#comment-3168</link>
		<dc:creator>vlod</dc:creator>
		<pubDate>Fri, 25 Sep 2009 05:07:41 +0000</pubDate>
		<guid isPermaLink="false">http://blog.tidyapps.com/?p=63#comment-3168</guid>
		<description>I&#039;m also getting ActionController::InvalidAuthenticityToken when the user has turned off cookies. I&#039;m not sure how to deal with it. I would like it to go to a page that says &quot;please turn on your cookies&quot;.

Any suggestions on how to do this?

Thanks for your help.</description>
		<content:encoded><![CDATA[<p>I&#8217;m also getting ActionController::InvalidAuthenticityToken when the user has turned off cookies. I&#8217;m not sure how to deal with it. I would like it to go to a page that says &#8220;please turn on your cookies&#8221;.</p>
<p>Any suggestions on how to do this?</p>
<p>Thanks for your help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Sporadic InvalidAuthenticityToken for some users by Dean</title>
		<link>http://blog.tidyapps.com/2009/07/sporadic-invalidauthenticitytoken-for-some-users/comment-page-1/#comment-3164</link>
		<dc:creator>Dean</dc:creator>
		<pubDate>Thu, 24 Sep 2009 00:19:35 +0000</pubDate>
		<guid isPermaLink="false">http://blog.tidyapps.com/?p=63#comment-3164</guid>
		<description>I just figured out what the issue was with me right as I typed that above...

In my application controller, I have a before_filter to make sure the user is logged in.  This was placed below the protect_from_forgery statement.  So, I&#039;m guessing the protect_from_forgery would look at the authenticity_token from an invalid session and freak out...  This was consistent.

So, I moved the before_filter ABOVE the protect_from_forgery line and now it consistently redirects to the login page when the session has been destroyed.</description>
		<content:encoded><![CDATA[<p>I just figured out what the issue was with me right as I typed that above&#8230;</p>
<p>In my application controller, I have a before_filter to make sure the user is logged in.  This was placed below the protect_from_forgery statement.  So, I&#8217;m guessing the protect_from_forgery would look at the authenticity_token from an invalid session and freak out&#8230;  This was consistent.</p>
<p>So, I moved the before_filter ABOVE the protect_from_forgery line and now it consistently redirects to the login page when the session has been destroyed.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Sporadic InvalidAuthenticityToken for some users by Dean</title>
		<link>http://blog.tidyapps.com/2009/07/sporadic-invalidauthenticitytoken-for-some-users/comment-page-1/#comment-3163</link>
		<dc:creator>Dean</dc:creator>
		<pubDate>Thu, 24 Sep 2009 00:09:18 +0000</pubDate>
		<guid isPermaLink="false">http://blog.tidyapps.com/?p=63#comment-3163</guid>
		<description>Agreed.  I can consistently recreate this issue if I am sitting on a form page, delete my session out of the sessions table and then try to submit the form.  Instead of my application catching the the sessions has expired with my before_filter and redirecting to the login as it SHOULD, it instead gives the InvalidAuthenticationToken error and throws a 422.  It doesn&#039;t give me the option to handle this properly...</description>
		<content:encoded><![CDATA[<p>Agreed.  I can consistently recreate this issue if I am sitting on a form page, delete my session out of the sessions table and then try to submit the form.  Instead of my application catching the the sessions has expired with my before_filter and redirecting to the login as it SHOULD, it instead gives the InvalidAuthenticationToken error and throws a 422.  It doesn&#8217;t give me the option to handle this properly&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on TenderApp vs GetSatisfaction vs UserVoice by Jo</title>
		<link>http://blog.tidyapps.com/2009/07/tenderapp-vs-getsatisfaction-vs-uservoice/comment-page-1/#comment-3096</link>
		<dc:creator>Jo</dc:creator>
		<pubDate>Tue, 25 Aug 2009 08:16:38 +0000</pubDate>
		<guid isPermaLink="false">http://blog.tidyapps.com/?p=46#comment-3096</guid>
		<description>Since I wrote this post about tender support, they&#039;ve added the ability to add the inline tab functionality of other systems. The functionality is more extensible than the other offerings too so double thumbs up now.</description>
		<content:encoded><![CDATA[<p>Since I wrote this post about tender support, they&#8217;ve added the ability to add the inline tab functionality of other systems. The functionality is more extensible than the other offerings too so double thumbs up now.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.534 seconds -->
