# File lib/action_controller/request_forgery_protection.rb, line 87 def verified_request? !protect_against_forgery? || request.method == :get || request.xhr? || !verifiable_request_format? || form_authenticity_token == form_authenticity_param end