Class: Rack::Protection::RemoteReferrer
| Relationships & Source Files | |
| Super Chains via Extension / Inclusion / Inheritance | |
|
Class Chain:
self,
Base
|
|
|
Instance Chain:
self,
Base
|
|
| Inherits: |
Rack::Protection::Base
|
| Defined in: | rack-protection/lib/rack/protection/remote_referrer.rb |
Overview
Prevented attack:: CSRF Supported browsers:: all More infos:: http://en.wikipedia.org/wiki/Cross-site_request_forgery
Does not accept unsafe HTTP requests if the Referer [sic] header is set to a different host.
Constant Summary
Base - Inherited
Class Method Summary
Base - Inherited
Instance Attribute Summary
Instance Method Summary
Base - Inherited
| #accepts?, #call, #default_options, | |
| #default_reaction | Alias for Base#deny. |
| #deny, #drop_session, #encrypt, #html?, #instrument, #origin, #random_string, #react, #referrer, #report, #safe?, #secure_compare, #session, #session?, #warn | |
Constructor Details
This class inherits a constructor from Rack::Protection::Base
Instance Method Details
#accepts?(env) ⇒ Boolean
# File 'rack-protection/lib/rack/protection/remote_referrer.rb', line 17
def accepts?(env) safe?(env) or referrer(env) == Request.new(env).host end