Rack Protection - Another Cool Gem
This one I haven’t evaluated yet, but looks promising: Rack Protection, to prevent typical web attacks such as cross site request forgery, cross site scripting, clickjacking, directory traversal, session hijacking and IP spoofing.