4 commits

Author	SHA1	Message	Date
Sdogruyol	6d4bf575cb	Make session accept more types	2016-09-30 14:03:29 +03:00
Sdogruyol	4edebcf8eb	Format	2016-07-17 14:31:45 +03:00
Mike Perham	22d6c1773e	Remove HTTP prefix, this is a Rack impl convention, not a standard.	2016-06-29 14:52:47 -07:00
Mike Perham	e407d0195c	Implement CSRF protection ... This adds a middleware which, when activated, will deny any form submission which does not include a valid `authenticity_token` parameter or `http-x-csrf-token` header with the request. The header and parameter names are identical to the ones supported by Ruby's rack-protection gem for interoperability purposes.	2016-06-28 15:50:43 -07:00