rkh/rack-protection — pull request #13 by hecticjeff (2011-12-02 19:55:19+00:00)
Title: Show warnings for JsonCsrf attacks

Since the `JsonCsrf` middleware overrides the `call` method, the default
warning is never displayed. I couldn't figure out why sinatra was
returning a 403 for CORS and JSONP requests, tracked it down to this.