eLobato/foreman — pull request #4 by eLobato (2014-11-26 00:24:40+00:00)
Title: Fixes #6999 - User log out susceptible to CSRF

To avoid CSRF, logout is changed to be a POST request so
protect_from_forgery checks the CSRF token. However, in Rails 3 the only
strategy available is to nullify the session of the attacker.
We modify this behavior to raise a Foreman Exception.
This issue is probably worth revisiting on the update to Rails 4 as
throwing an exception is a valid strategy again.