ejschmitt/delayed_job_web — pull request #51 by toolmantim (2014-03-06 13:04:17+00:00)
Title: Security fixes

Fixes some quite serious security faults with delayed_job_admin:

* SQL injection attack via `?queues` parameter
* Destructive actions via GET (they're now POST)
* CSRF protection for destructive actions
* Adds Rack::Protection (via an updated Sinatra)

Without these changes, someone could quite easily drop your entire DB via an image tag.