Security Vulnerability with compressed html

[kevinhughes27]

Rafeal said this is the reason Rails doesn't use Rack::Deflate by default: http://breachattack.com/

[kevinhughes27]

Rafeal:
It is only an issue if you have a csrf token in the page, usually all rails pages has