Fixes CSRF OmniAuth issue

wangjohnnywang · Mar 30, 2016 · eaef1bc · eaef1bc
1 parent 02d2f26
commit eaef1bc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/shopify_app/login_protection.rb b/lib/shopify_app/login_protection.rb
@@ -64,7 +64,7 @@ def redirect_to_with_fallback(url)
  <html lang="en">
  <head>
  <meta charset="utf-8" />
- <meta http-equiv="refresh" content="0; url=#{url_json_no_quotes}">
+ <meta http-equiv="refresh" content="1; url=#{url_json_no_quotes}">
  <title>Redirecting…</title>
  <script type="text/javascript">
  window.location.href = #{url_json};
@@ -87,7 +87,7 @@ def fullpage_redirect_to(url)
  <html lang="en">
  <head>
  <meta charset="utf-8" />
- <meta http-equiv="refresh" content="0; url=#{url_json_no_quotes}">
+ <meta http-equiv="refresh" content="1; url=#{url_json_no_quotes}">
  <base target="_top">
  <title>Redirecting…</title>
  <script type="text/javascript">