This extension is part of the Rack::Protection project. Run gem install rack-protection to have it available.
- Prevented attack
- Supported browsers
- More infos
If request includes Origin HTTP header, defers to HttpOrigin to determine if the request is safe. Please refer to the documentation for more info.
The ‘:allow_if` option can be set to a proc to use custom allow/deny logic.