From mboxrd@z Thu Jan 1 00:00:00 1970 Delivered-To: chneukirchen@gmail.com Received: by 10.229.192.141 with SMTP id dq13cs9637qcb; Fri, 24 Feb 2012 07:21:10 -0800 (PST) Return-Path: Received-SPF: pass (google.com: domain of rack-devel+bncCLCx0LfOFxDj1Z76BBoEk3rDaQ@googlegroups.com designates 10.50.187.194 as permitted sender) client-ip=10.50.187.194; Authentication-Results: mr.google.com; spf=pass (google.com: domain of rack-devel+bncCLCx0LfOFxDj1Z76BBoEk3rDaQ@googlegroups.com designates 10.50.187.194 as permitted sender) smtp.mail=rack-devel+bncCLCx0LfOFxDj1Z76BBoEk3rDaQ@googlegroups.com; dkim=pass header.i=rack-devel+bncCLCx0LfOFxDj1Z76BBoEk3rDaQ@googlegroups.com Received: from mr.google.com ([10.50.187.194]) by 10.50.187.194 with SMTP id fu2mr3311781igc.5.1330096869518 (num_hops = 1); Fri, 24 Feb 2012 07:21:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=beta; h=x-beenthere:date:from:to:message-id:in-reply-to:references:subject :mime-version:x-original-sender:reply-to:precedence:mailing-list :list-id:x-google-group-id:list-post:list-help:list-archive:sender :list-subscribe:list-unsubscribe:content-type; bh=cySeN7Ntcx1S9gpkL4GfUvdqDQAhAWjk/4EDewjyK/o=; b=T1pn5sk/RJDBqJgnO5jMAwEGyQa5oYlTcsUT2Mwt7VRIC6ZnxfUWWX+ZUZlMnWPDYE uMdwnjh2nMCbEg+lq/MvOHjnfZQ5iKjAHsPlhhD8p8/CJ8YCCMCjgYgRQCsK3ypml+9n BNIvY9eN9xuJv3LUrIi/SfGK2juKpKQC7WqcQ= Received: by 10.50.187.194 with SMTP id fu2mr913185igc.5.1330096867247; Fri, 24 Feb 2012 07:21:07 -0800 (PST) X-BeenThere: rack-devel@googlegroups.com Received: by 10.50.82.72 with SMTP id g8ls1281267igy.0.canary; Fri, 24 Feb 2012 07:21:05 -0800 (PST) Received: by 10.43.53.73 with SMTP id vp9mr1099150icb.0.1330096865841; Fri, 24 Feb 2012 07:21:05 -0800 (PST) Received: by 10.50.209.5 with SMTP id mi5msigc; Fri, 24 Feb 2012 05:50:08 -0800 (PST) Received: by 10.52.100.167 with SMTP id ez7mr99933vdb.13.1330091407974; Fri, 24 Feb 2012 05:50:07 -0800 (PST) Date: Fri, 24 Feb 2012 05:50:06 -0800 (PST) From: vzmind To: rack-devel@googlegroups.com Message-ID: <14099024.202.1330091407346.JavaMail.geo-discussion-forums@vbkl3> In-Reply-To: <362bf00c-5025-4dbd-a52f-9c7cda5dcc02@e19g2000yqk.googlegroups.com> References: <07cff8a0-8439-461c-b7f6-804ab417b0f4@l24g2000yqm.googlegroups.com> <2bab7814-f4d4-4974-87c2-1fbe3bd546a2@p14g2000yqp.googlegroups.com> <362bf00c-5025-4dbd-a52f-9c7cda5dcc02@e19g2000yqk.googlegroups.com> Subject: Re: attack prevented by Rack::Protection::RemoteToken MIME-Version: 1.0 X-Original-Sender: vincent.spehner@gmail.com Reply-To: rack-devel@googlegroups.com Precedence: list Mailing-list: list rack-devel@googlegroups.com; contact rack-devel+owners@googlegroups.com List-ID: X-Google-Group-Id: 486215384060 List-Post: , List-Help: , List-Archive: Sender: rack-devel@googlegroups.com List-Subscribe: , List-Unsubscribe: , Content-Type: multipart/alternative; boundary="----=_Part_201_16184109.1330091407345" ------=_Part_201_16184109.1330091407345 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I confirm that solve such issue. Just add set :protection, :except => [:remote_token, :frame_options] to your config.ru ----Tks ------=_Part_201_16184109.1330091407345 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit I confirm that solve such issue. Just add
set :protection, :except => [:remote_token, :frame_options]
to your config.ru

----Tks
------=_Part_201_16184109.1330091407345--