kotovalexarian-likes-github/sinatra
1
0
Fork 0
mirror of https://github.com/sinatra/sinatra synced 2023-03-27 23:18:01 -04:00
Code Releases Activity

do not enable parameter escaping by default, fixes #8

Browse source
This commit is contained in:
Konstantin Haase 2011-12-30 13:04:14 +01:00
parent 7b74143147
commit 18529c9bdd
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
rack-protection/lib/rack/protection.rb
View file

@ -20,7 +20,6 @@ module Rack
# does not include: RemoteReferrer, AuthenticityToken and FormToken
except = Array options[:except]
Rack::Builder.new do
use ::Rack::Protection::EscapedParams, options unless except.include? :escaped_params
use ::Rack::Protection::FrameOptions, options unless except.include? :frame_options
use ::Rack::Protection::IPSpoofing, options unless except.include? :ip_spoofing
use ::Rack::Protection::JsonCsrf, options unless except.include? :json_csrf