This extension is part of the Rack::Protection project. Run gem install rack-protection to have it available.
- Prevented attack
-
CSRF
- Supported browsers
-
all
- More infos
- </dl>
Only accepts submitted forms if a given access token matches the token included in the session. Does not expect such a token from Ajax request.
This middleware is not used when using the Rack::Protection collection, since it might be a security issue, depending on your application
Compatible with rack-csrf.