Q:

ActionController::InvalidCrossOriginRequest in Controller Test

When running legacy controller tests like this one:
    get :edit, id: object.id, format: :js

My tests began failing in Rails 4.1 with the following error:
ActionController::InvalidCrossOriginRequest: Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.

A:

Older versions of Rails accepted this, but the solution was to use the xhr method as follows:
  xhr :get, :edit, id: object.id

A:

For Rails 5+
get :edit, params: { id: object.id }, xhr: true

