Class Rack::Protection::SessionHijacking
In: lib/rack/protection/session_hijacking.rb
Parent: Base
Prevented attack:Session Hijacking
Supported browsers:all
More infos:en.wikipedia.org/wiki/Session_hijacking

Tracks request properties like the user agent in the session and empties the session if those properties change. This essentially prevents attacks from Firesheep. Since all headers taken into consideration might be spoofed, too, this will not prevent all hijacking attempts.

Methods

accepts?   encrypt  

Public Instance methods

[Validate]