Noteworthy? Insert middleware before ActionDispatch::ParamsParser

[2called-chaos]

I know this is rails specific but maybe this could be noted somewhere?

I tried to block this with rack-attack: http://stackoverflow.com/questions/25274125/jsonparsererror-n-unexpected-token-at-alihackeval-request-alihack-c

Turned out that the rack-attack middleware is to late to block this request before it breaks.

Solution: Insert the rack-attack middleware before the ParamsParser middelware:

config.middleware.insert_before ActionDispatch::ParamsParser, Rack::Attack

[ktheory]

@2called-chaos Thanks, noted. 👌

(Rack::Attack's Readme](https://github.com/kickstarter/rack-attack/blob/25739e24dbc820898cf45d120b1e794e8f6f4df1/README.md#getting-started) inserts the middleware naively.

It's up to app developers to determine the appropriate order of their middleware.

This issue seems like a good note for people googling the issue, but there's nothing to change in Rack::Attack.

Thanks again. 🍻