baldowl/rack_csrf — pull request #2 by ghermeto (2011-10-20 17:54:53+00:00)
Title: Adding a :allow list that changes default behavior to check all routes (when a list is given)

When the :allow list is given, it will check only the routes on the list, otherwise the default behavior stays the same (to check all, except the ones in the :skip list).
This is useful when you don't want to add CSRF protection on all your routes, but only on specific ones.
Also added specs for all cases I could remember and changed README file.