This extension is part of the Rack::Protection project. Run gem install rack-protection to have it available.
- Prevented attack
- Supported browsers
- More infos
Only accepts unsafe HTTP requests if a given access token matches the token included in the session or the request comes from the same origin.
Compatible with rack-csrf.