Jordan Owens 7c88c7cca6 2.2.4 release		2022-12-16 17:51:58 -05:00
..
authenticity_token.rb	Block invalid requests instead of raising error	2022-04-13 20:59:23 -04:00
base.rb	include application/xml and text/xml content-types to valid html_types for Rack::Protection	2018-03-30 13:15:20 -07:00
content_security_policy.rb	Allow CSP to fallback to default-src (#1490)	2020-03-13 17:07:34 -04:00
cookie_tossing.rb	Remove extra calls to method that determines cookie paths	2016-07-31 16:24:58 -04:00
escaped_params.rb	Fix Tempfile reference being returned as nil	2015-09-30 16:51:50 -05:00
form_token.rb	Make authenticity token length a fixed value of 32	2016-09-20 11:43:22 -04:00
frame_options.rb	rework protection headers, fixes #40	2013-03-01 15:36:05 +11:00
http_origin.rb	Fix broken origin_whitelist option #1641	2020-09-18 11:11:43 +09:00
ip_spoofing.rb	fix ReDoS	2022-11-25 15:15:05 -05:00
json_csrf.rb	Add allow_if option to bypass json csrf protection	2017-03-12 23:00:26 -04:00
path_traversal.rb	Drop Ruby 1.8 compat code	2019-04-12 22:29:34 +02:00
referrer_policy.rb	Add Rack::Protection::ReferrerPolicy. (#1291)	2020-03-13 10:10:54 -04:00
remote_referrer.rb	remove note about NoReferrer	2013-03-01 15:23:34 +11:00
remote_token.rb	Make authenticity token length a fixed value of 32	2016-09-20 11:43:22 -04:00
session_hijacking.rb	Don't track the Accept-Language header by default.	2018-12-15 15:22:21 -05:00
strict_transport.rb	Adds preload option to Rack:Protection:StrictTransport	2016-11-26 16:10:35 +00:00
version.rb	2.2.4 release	2022-12-16 17:51:58 -05:00
xss_header.rb	Document Chrome is also supported by XSSHeader [ci skip]	2016-07-28 13:36:52 +09:00