https://unaaldia.hispasec.com/2012/07/denegacion-de-servicio-en-ruby-on-rails.html