Konstantin Haase 8010a8fe9a make session hijacking middleware ignore case, fixes #11		2012-12-10 16:26:11 +01:00
..
authenticity_token.rb	remove "not yet implemented" comments if not true	2011-06-19 14:54:29 +02:00
base.rb	Bypass referer check if Origin header is given	2012-09-05 10:08:09 +02:00
escaped_params.rb	allow cache-breaker params in EscapedParams	2012-07-02 11:14:57 -04:00
form_token.rb	implement form token protection	2011-06-20 09:17:04 +02:00
frame_options.rb	add links to more infos	2011-05-24 12:23:22 +02:00
http_origin.rb	Initial implementation of HTTP Origin	2012-01-30 15:57:03 +07:00
ip_spoofing.rb	Add parens for 'Ambiguous first argument' warnings in jruby	2011-09-28 22:54:32 -07:00
json_csrf.rb	Bypass referer check if Origin header is given	2012-09-05 10:08:09 +02:00
path_traversal.rb	Do not add a / to empty path in 'path_traversal'	2012-05-27 23:17:39 +02:00
remote_referrer.rb	remove "not yet implemented" comments if not true	2011-06-19 14:54:29 +02:00
remote_token.rb	remove "not yet implemented" comments if not true	2011-06-19 14:54:29 +02:00
session_hijacking.rb	make session hijacking middleware ignore case, fixes #11	2012-12-10 16:26:11 +01:00
version.rb	bump version	2011-12-30 13:08:30 +01:00
xss_header.rb	X-Content-Type-Options feature	2012-06-28 20:37:12 +09:00