X-Content-Type-Options feature
Merge pull request #26 from send/x-content-type-options

X-Content-Type-Options feature
allow cache-breaker params in EscapedParams
Merge pull request #27 from spagalloco/escapenils

allow cache-breaker params in EscapedParams
Fix typo in FrameOptions example description
Merge pull request #29 from savulchik/master

Fix for issue #28
Bypass referer check if Origin header is given
Merge pull request #30 from bjoerge/add-json-crsf-http-origin-check

Bypass referer check if Origin header is given
upgrade rake
make session hijacking middleware ignore case, fixes #11
only set protection headers for html, fixes #31
use upper case for frame options, fixes #25
remove history section
bump version
Don't choke on requests that end up without a content-type header
Merge pull request #32 from cheald/master

Don't choke on requests that end up without a content-type header
small refactor
bump version
regenerate gemspec
escape unicode in gemspec, fixes #35