Merge pull request #13 from hecticjeff/json-csrf-warning

Show warnings for JsonCsrf attacks

rack-protection/lib/rack/protection/json_csrf.rb

@@ -16,7 +16,10 @@ module Rack
       def call(env)
         status, headers, body = app.call(env)
         if headers['Content-Type'].to_s.split(';', 2).first =~ /^\s*application\/json\s*$/
-          result = react(env) if referrer(env) != Request.new(env).host
+          if referrer(env) != Request.new(env).host
+            result = react(env)
+            warn env, "attack prevented by #{self.class}"
+          end
         end
         result or [status, headers, body]
       end