title: Rails InvalidCrossOriginRequest
body: <p>I have a <code>remote: true</code> link on a page in my Rails app which calls a <code>.js</code> version of the same page and then runs a script to update the pages content in place.</p>
  
  <p>It was working fine but since yesterday I now get <code>Security warning: an embedded &lt;script&gt; tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.</code> everytime I click one of those links.</p>
  
  <p>Any ideas on how I can stop this?</p>