app/controllers/documents_v2_controller.rb
# don't check for csrf token
don't check for csrf token
don ' t check for csrf token
def autolaunch
    @document = Document.find_by(id: params[:id])
    @codap_server = launch_params[:server]
    @launch_url = codap_v2_link(@codap_server)
    authorize! :open, :url_document
    response.headers.delete 'X-Frame-Options'
    render layout: 'launch'
  end
def autolaunch @document = Document . find_by ( id : params [ :id ] ) @codap_server = launch_params [ :server ] @launch_url = codap_v2_link ( @codap_server ) authorize! :open , :url_document response . headers . delete 'X-Frame-Options' render layout : 'launch' end
don't check for csrf token
don ' t check for csrf token