security - How to avoid BREACH attacks in rails? -

i've been reading breach attack and, despites attack involves web application in server level too, wondering if there's block these kind of attacks in rails.
i've found breach-mitigation-rails not bullet-proof solution, mitigate attack in someways. else around there?

the presenters of breach have put a website further details. listed mitigations, ordered effectiveness, are:

1. disabling http compression
2. separating secrets user input
3. randomizing secrets per request
4. masking secrets
5. protecting vulnerable pages csrf
6. length hiding
7. rate-limiting requests

http compression can disabled @ server, @ expense of efficiency.

the breach-mitigation-rails gem addresses points #4 , #6. break caching , increase page size.

another interesting fix works on point #4, none of negative impacts on efficiency, require javascript (which can cut down on spam submissions, anyway).

an official fix being discussed.

you may find non-rails-specific question interesting - https://security.stackexchange.com/questions/39925/breach-a-new-attack-against-http-what-can-be-done.