Florian Gilcher 3835ec3ea8 Add a `report` reaction ... This reaction does not halt the request, but leaves it up to the app to react on this information. This allows e.g. frameworks to ignore failures in certain conditions.		2013-03-10 23:34:37 +01:00
..
authenticity_token_spec.rb	spects for token checks	2011-06-20 09:16:44 +02:00
escaped_params_spec.rb	allow cache-breaker params in EscapedParams	2012-07-02 11:14:57 -04:00
form_token_spec.rb	spects for token checks	2011-06-20 09:16:44 +02:00
frame_options_spec.rb	use upper case for frame options, fixes #25	2012-12-10 16:48:21 +01:00
http_origin_spec.rb	refactored spec	2012-05-12 22:23:25 +07:00
ip_spoofing_spec.rb	pending tests for ip spoofing	2011-06-20 15:47:29 +02:00
json_csrf_spec.rb	xhr requests cannot be used for the json attack, fixes #39	2013-03-01 15:43:27 +11:00
path_traversal_spec.rb	deal with PATH_INFO being nil, fixes #7	2011-10-04 15:05:26 -07:00
protection_spec.rb	Add a `report` reaction	2013-03-10 23:34:37 +01:00
remote_referrer_spec.rb	remove NoReferrer, instead, take an option for that	2011-06-20 13:08:39 +02:00
remote_token_spec.rb	pending specs for remote token	2011-06-20 15:47:43 +02:00
session_hijacking_spec.rb	make session hijacking middleware ignore case, fixes #11	2012-12-10 16:26:11 +01:00
spec_helper.rb	improve compatibility to old rack versions, fixes #36	2012-12-12 11:03:07 +01:00
xss_header_spec.rb	rework protection headers, fixes #40	2013-03-01 15:36:05 +11:00