rkh/rack-protection — pull request #16 by p0deje (2012-01-30 09:04:16+00:00)
Title: Implementation of Origin CSRF mitigation request header

Short intro to Origin - http://blog.chromium.org/2010/01/security-in-depth-new-security-features.html

This implementation is based on http://tools.ietf.org/html/draft-abarth-origin.
Please note that v7+ of specification lacks "HTTP Server Behavior" section, so I used earlier versions too.

What do you think about it?