Recently I have seen attempts from few users on my website who try taking up quizzes with automated scripts, which I can tell by seeing the time difference between the submitted questions. Even the total time taken by users is between 2-3 mins where they are supposed to read, understand and answer 50-60 questions with a maximum time of 2 min for each question. Not only this, the users even start and end multiple quizzes at the same time which is not humanly possible.
How can I prevent such attacks or stop such automated scripts in a Rails App. My app runs on Rails 3.2. I have tried adding gem 'secure_headers'
, but as my app is huge now, the gem requires lot of code changes in my app, which I feel I should have done from the beginning.
Rails 4 already has protection against atleast xss kind of attacks but is there a solution for Rails 3.x ?
Aucun commentaire:
Enregistrer un commentaire