From 8257c51ffa8bac8e247086f46aae72e23b1e0220 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Wed, 22 Jul 2026 18:58:36 +0100
Subject: [PATCH] Move CSRF disablement to the correct controller

---
 app/controllers/accounts/auth_deletions_controller.rb | 2 ++
 app/controllers/accounts/deletions_controller.rb      | 2 --
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/controllers/accounts/auth_deletions_controller.rb b/app/controllers/accounts/auth_deletions_controller.rb
index 6cffe789c..6186ef1c8 100644
--- a/app/controllers/accounts/auth_deletions_controller.rb
+++ b/app/controllers/accounts/auth_deletions_controller.rb
@@ -4,6 +4,8 @@ module Accounts
   class AuthDeletionsController < ApplicationController
     layout :site_layout
 
+    skip_before_action :verify_authenticity_token
+
     before_action :set_locale
 
     authorize_resource :class => :auth_deletion
diff --git a/app/controllers/accounts/deletions_controller.rb b/app/controllers/accounts/deletions_controller.rb
index 4fde6252a..da73b0093 100644
--- a/app/controllers/accounts/deletions_controller.rb
+++ b/app/controllers/accounts/deletions_controller.rb
@@ -4,8 +4,6 @@ module Accounts
   class DeletionsController < ApplicationController
     layout :site_layout
 
-    skip_before_action :verify_authenticity_token
-
     before_action :authorize_web
     before_action :set_locale
 
-- 
2.47.3