Re: two security questions

2010-08-12 Thread Magnus Holm
This example worked here: require 'rubygems' require 'rack/csrf' require 'camping' require 'camping/session' Camping.goes :Hello module Hello use Rack::Csrf include Camping::Session end module Hello::Controllers class Index def get

Re: two security questions

2010-08-11 Thread David Susco
Ted, Do you use Camping::Session with Rack::Csrf? If so, how did you get it to work? Once I include Camping::Session the csrf_token changes every time I call the method. Can anyone explain what include Camping::Session is actually doing? Dave On Mon, Aug 9, 2010 at 12:22 PM, Ted Kimble

Re: two security questions

2010-08-11 Thread Ted Kimble
Dave, Unfortunately I've actually not yet used Rack::Csrf with Camping. In Sinatra, I just: use Rack::Session::Cookie, :secret = something use Rack::Csrf and it works fine. Looking at Camping's source for Camping::Session, it looks like it's basically doing the same

Re: two security questions

2010-08-10 Thread David Susco
Thanks, that did the trick. Got to comb through my templates now though :P. On Tue, Aug 10, 2010 at 4:01 PM, Magnus Holm judo...@gmail.com wrote: David, As far as I remember, this should work:  module App    set :haml, { :escape_html = true }  end You set options (as specified in

Re: two security questions

2010-08-10 Thread Magnus Holm
Great; sorry for the delay, but I've been here in the last days :-) http://upload.wikimedia.org/wikipedia/commons/b/bd/Preikestolen_Norge.jpg // Magnus Holm On Tue, Aug 10, 2010 at 22:50, David Susco dsu...@gmail.com wrote: Thanks, that did the trick. Got to comb through my templates now