mirror of
https://github.com/sinatra/sinatra
synced 2023-03-27 23:18:01 -04:00
Update attack protection documentation
This commit is contained in:
parent
1c623006dc
commit
593cb372b9
1 changed files with 8 additions and 1 deletions
|
@ -2111,7 +2111,14 @@ set :protection, :except => [:path_traversal, :session_hijacking]
|
|||
```
|
||||
|
||||
By default, Sinatra will only set up session based protection if `:sessions`
|
||||
have been enabled. See 'Using Sessions'.
|
||||
have been enabled. See 'Using Sessions'. Sometimes you may want to set up
|
||||
sessions "outside" of the Sinatra app, such as in the config.ru or with a
|
||||
separate Rack::Builder instance. In that case you can still set up session
|
||||
based protection by passing the `:session` option:
|
||||
|
||||
```ruby
|
||||
set :protection, :session => true
|
||||
```
|
||||
|
||||
### Available Settings
|
||||
|
||||
|
|
Loading…
Reference in a new issue