1
0
Fork 0
mirror of https://github.com/sinatra/sinatra synced 2023-03-27 23:18:01 -04:00

note about firesheep

This commit is contained in:
Konstantin Haase 2011-05-24 14:32:34 +02:00
parent d92302670f
commit 37c4d91c69

View file

@ -8,7 +8,9 @@ module Rack
# More infos:: http://en.wikipedia.org/wiki/Session_hijacking # More infos:: http://en.wikipedia.org/wiki/Session_hijacking
# #
# Tracks request properties like the user agent in the session and empties # Tracks request properties like the user agent in the session and empties
# the session if those properties change. # the session if those properties change. This essentially prevents attacks
# from Firesheep. Since all headers taken into consideration might be
# spoofed, too, this will not prevent all hijacking attempts.
# #
# Not Yet Implemented! # Not Yet Implemented!
class SessionHijacking < Base class SessionHijacking < Base