require 'stringio'
class ConsoleController < ApplicationController

  skip_before_filter :verify_authenticity_token

  def index
  end

  def run
    session[:script] = params[:script]
    stdout_orig = $stdout
    $stdout = StringIO.new
    begin
      result_eval = eval params[:script], binding
      $stdout.rewind
      result = %Q{<div class="stdout">#{escape $stdout.read}</div>
        <div class="return">#{escape result_eval.inspect}</div>}
    rescue Exception => e
      result = e.to_s
    end
    $stdout = stdout_orig
    render :text => result.gsub("\n", "<br />\n")
  end

private
  def escape(content)
    view_context.escape_once content
  end
end

require 'stringio'
class ConsoleController < ApplicationController
  skip_before_action :verify_authenticity_token

  def index
  end

  def run
    session[:script] = params[:script]
    stdout_orig = $stdout
    $stdout = StringIO.new
    begin
      result_eval = eval params[:script], binding
      $stdout.rewind
      result = %Q{<div class="stdout">#{escape $stdout.read}</div>
        <div class="return">#{escape result_eval.inspect}</div>}
    rescue Exception => e
      result = e.to_s
    end
    $stdout = stdout_orig
    render :text => result.gsub("\n", "<br />\n")
  end

private
  def escape(content)
    view_context.escape_once content
  end
end

--- 
+++ 
@@ -1,6 +1,7 @@
 require 'stringio'
 class ConsoleController < ApplicationController
-  skip_before_action :verify_authenticity_token
+
+  skip_before_filter :verify_authenticity_token
 
   def index
   end
Fix Rails < 4.0 compatability

Just use before_filter, no before_action
