如何在rails应用程序中关闭CSRF保护？

config.action_controller.allow_forgery_protection = true

config.action_controller.default_protect_from_forgery = false

Rails.application.config.session_store :cookie_store, key: '_your_app_name_session', secure: false

ActiveSupport.on_load(:action_controller) do
  wrap_parameters format: [:json]
end

Rails.application.config.action_controller.forgery_protection_origin_check = false

Rails.application.config.action_dispatch.default_headers = {
  'X-Frame-Options' => 'ALLOWALL'
}

Rails.application.config.content_security_policy do |policy|
  policy.default_src :self, :https, :ws, :wss
  policy.font_src :self, :https, :data
  policy.img_src :self, :https, :data
  policy.object_src :none
  policy.script_src :self, :https, :unsafe_inline
  policy.style_src :self, :https, :unsafe_inline
  policy.frame_src :self, :https
  policy.connect_src :self, :https, :ws, :wss
  policy.media_src :self, :https, :data
  policy.form_action :self, :https
end