module Rack
module Rack::Protection
class Rack::Protection::AuthenticityToken
class Rack::Protection::Base
class Rack::Protection::ContentSecurityPolicy
class Rack::Protection::CookieTossing
class Rack::Protection::EscapedParams
class Rack::Protection::FormToken
class Rack::Protection::FrameOptions
class Rack::Protection::HttpOrigin
class Rack::Protection::IPSpoofing
class Rack::Protection::JsonCsrf
class Rack::Protection::PathTraversal
class Rack::Protection::ReferrerPolicy
class Rack::Protection::RemoteReferrer
class Rack::Protection::RemoteToken
class Rack::Protection::SessionHijacking
class Rack::Protection::StrictTransport
class Rack::Protection::XSSHeader
rack-protection
2.2.2
# accepts?
def accepts?(env) env["HTTP_X_REQUESTED_WITH"] == "XMLHttpRequest" or super end