meldium/breach-mitigation-rails — pull request #16 by nealharris (2014-03-25 18:29:06+00:00)
Title: allow length-hiding to be disabled

This will:

- leave length-hiding turned on by default, but allow you to disable it if you want. Given how the length-hiding interacts with Rack, streaming, etc., this is sometimes desirable.
- pad both html and xhtml responses.
- refer to `ActiveSupport` as `activesupport` rather than `active_support` in the gemspec.
- require `securerandom` in `spec_helper.rb`, so that tests can be run locally.