Hacker News Reader

It relies on a header, which can't be set through the attack vector, so it's all kosher.

Since we are on the same page, could you help me in this discussion with nzkoz? https://github.com/rails/rails/issues/11509 we're talking about different things