mhartl / catch_cookie_exception
watch download tarball
public
Forks2Right
Watchers6Right
Description: Catch and handle the CGI::Session::CookieStore::TamperedWithCookie exception that comes from changing the Rails secret string. See http://blog.insoshi.com/2008/08/15/a-security-issue-with-rails-secret-session-keys/
Homepage:
Clone URL: git://github.com/mhartl/catch_cookie_exception.git
name age
history
message
file MIT-LICENSE Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
file README.markdown Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
file Rakefile Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
file catch_cookie_exception.gemspec Tue Oct 28 11:06:46 -0700 2008 Fixed version typo [mhartl]
file init.rb Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
file install.rb Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
directory lib/ Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
directory tasks/ Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
directory test/ Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
file uninstall.rb Wed Oct 08 18:39:41 -0700 2008 init [mhartl]
README.markdown

CatchCookieException

Implements the plugin from the blog post A security issue with Rails secret session keys.

Install this plugin as follows:

$ script/plugin install git://github.com/mhartl/catch_cookie_exception.git

Copyright (c) 2008 Michael Hartl, released under the MIT license