# File lib/action_controller/request_forgery_protection.rb, line 91 def verified_request? !protect_against_forgery? || request.get? || form_authenticity_token == form_authenticity_param || form_authenticity_token == request.headers['X-CSRF-Token'] end