mirror of https://github.com/sinatra/sinatra synced 2023-03-27 23:18:01 -04:00

History

Konstantin Haase 7798cda967 pending specs for json csrf		2011-06-20 15:47:58 +02:00
..
lib	remove NoReferrer, instead, take an option for that	2011-06-20 13:08:39 +02:00
spec	pending specs for json csrf	2011-06-20 15:47:58 +02:00
.gitignore	initial commit	2011-05-23 10:07:54 +02:00
Gemfile	initial commit	2011-05-23 10:07:54 +02:00
License	initial commit	2011-05-23 10:07:54 +02:00
rack-protection.gemspec	add escape_utils as dependency	2011-05-28 17:49:38 +02:00
Rakefile	initial commit	2011-05-23 10:07:54 +02:00
README.md	remove NoReferrer, instead, take an option for that	2011-06-20 13:08:39 +02:00

You should use protection!

This gem protects against typical web attacks. Should work for all Rack apps, including Rails.

Usage

Use all protections you probably want to use:

# config.ru
require 'rack/protection'
use Rack::Protection
run MyApp

Skip a single protection middleware:

# config.ru
require 'rack/protection'
use Rack::Protection, :except => :path_traversal
run MyApp

Use a single protection middleware:

# config.ru
require 'rack/protection'
use Rack::Protection::AuthenticityToken
run MyApp

Prevented Attacks

Prevented by:

Prevented by:

Prevented by:

Prevented by:

Prevented by:

Prevented by:

gem install rack-protection