Merge pull request #18 from adamlamar/authenticity-token-on-get

forms using GET method ignore authenticity_token
gobuffalo · Nov 3, 2017 · a70a4ff · a70a4ff
2 parents 081bad1 + 250230b
commit a70a4ff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/forms.go b/forms.go
@@ -57,7 +57,7 @@ func helper(opts tags.Options, help HelperContext, fn func(opts tags.Options) he
 		opts["errors"] = help.Context.Value("errors")
 	}
 	form := fn(opts)
-	if help.Value("authenticity_token") != nil {
+	if help.Value("authenticity_token") != nil && opts["method"] != "GET" {
 		form.SetAuthenticityToken(fmt.Sprint(help.Value("authenticity_token")))
 	}
 	ctx := help.Context.New()