huangzihao sforce100

Routes

Rails 3 提供了 match 方法供我们自定义 routes，然而我们要小心使用它以避免“跨站脚本攻击”（XSS Attack）。比如像这样的 routes：

注：（r3 代表 Rails 3，r4 代表 Rails 4）

# routes.rb

	# Author: Pieter Noordhuis
	# Description: Simple demo to showcase Redis PubSub with EventMachine
	#
	# Update 7 Oct 2010:
	# - This example does not appear to work with Chrome >=6.0. Apparently,
	# the WebSocket protocol implementation in the cramp gem does not work
	# well with Chrome's (newer) WebSocket implementation.
	#
	# Requirements:
	# - rubygems: eventmachine, thin, cramp, sinatra, yajl-ruby