rkh/rack-protection — pull request #30 by bjoerge (2012-09-05 08:13:25+00:00)
Title: Bypass referer check if Origin header is given

Alternative solution for PR #23 as discussed. Should also fix problems people are seeing with CORS (#14 and sinatra/sinatra#518)