Rubyã§å®‰å…¨ãªWebアプリを作るãŸã‚ã®ãƒ¡ãƒ¢ (2)å‰å›žã®è¨˜äº‹ã®ã¯ã¦ãƒ–ã®ã‚³ãƒ¡ãƒ³ãƒˆã§rack-protectionã«ã¤ã„ã¦ã®è¨€åŠãŒãªã„ã¨ã„ã†ã”指摘をã„ãŸã ãã¾ã—ãŸã€‚æ¥ãšã‹ã—ãªãŒã‚‰rack-protectionã«ã¤ã„ã¦ã¯çŸ¥ã‚‰ãªã‹ã£ãŸã®ã§ã€å°‘ã—調ã¹ã¦ã¿ã¾ã—ãŸã€‚ rack-protectionã¯ã€CSRFã‚„XSSã‚’ã¯ã˜ã‚ã¨ã—ãŸæ”»æ’ƒã«å¯¾å‡¦ã™ã‚‹ãŸã‚ã®Rack middlewareã§ã™ã€‚アプリケーションを起動ã™ã‚‹å‰ã«use Rack::Protectionを呼ã³å‡ºã—ã¦çµ„ã¿è¾¼ã‚€ã“ã¨ã§ã™ã¹ã¦ã®æ©Ÿèƒ½ã‚’ç°¡å˜ã«åˆ©ç”¨ã§ãã¾ã™ã€‚ require 'rack/protection' use Rack::Protection run App ãŸã ã€rack-protectionãŒä½•ã‚’ã—ã¦ã„ã‚‹ã®ã‹æŠŠæ¡ã—ã¦ã„ãªã„ã¨ã¯ã¾ã‚Šãã†ãªéƒ¨åˆ†ã‚‚ã„ãã¤ã‹ã‚ã‚‹ã®ã§ã€å°Žå…¥å‰ã«å„機能ã®æ¦‚è¦ã‚’ç†è§£ã—ã¦ãŠã„ãŸã»ã†ãŒã‚ˆã„ã§ã—ょã†ã€‚ rack-protectionãŒå®Ÿç¾ã—ã¦ã„る機能ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ C
{{#tags}}- {{label}}
{{/tags}}