💅 [ci skip]

This commit is contained in:
Zachary Scott 2016-08-09 12:51:45 +09:00
parent 4797c022c9
commit a7483f48b0
1 changed files with 5 additions and 1 deletions

View File

@ -1423,7 +1423,9 @@ set :session_store, Rack::Session::Pool
Another option is to **not** call `enable :sessions`, but instead pull in your
middleware of choice as you would any other middleware.
It is important to note that when using this method, session based protection (see 'Configuring attack protection') **will not be enabled by default**. The Rack middleware to do that will also need to be added:
It is important to note that when using this method, session based protection **will not be enabled by default**.
The Rack middleware to do that will also need to be added:
```ruby
use Rack::Session::Pool, :expire_after => 2592000
@ -1431,6 +1433,8 @@ use Rack::Protection::RemoteToken
use Rack::Protection::SessionHijacking
```
See 'Configuring attack protection' for more information.
### Halting
To immediately stop a request within a filter or route use: