diff --git a/Gemfile b/Gemfile
index 940e8e069..158436c5f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -175,7 +175,7 @@ group :production do # we don't install these on travis to speed up test runs
 
   # Click-jacking protection
 
-  gem 'rack-protection', '1.2'
+  gem 'rack-protection', '1.5.2'
 
   # Process management
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 7b07c1dd8..72e1f3163 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -394,7 +394,7 @@ GEM
     rack-pjax (0.8.0)
       nokogiri (~> 1.5)
       rack (~> 1.1)
-    rack-protection (1.2.0)
+    rack-protection (1.5.2)
       rack
     rack-rewrite (1.5.0)
     rack-ssl (1.4.1)
@@ -657,7 +657,7 @@ DEPENDENCIES
   rack-cors (= 0.2.9)
   rack-google-analytics (= 1.2.0)
   rack-piwik (= 0.3.0)
-  rack-protection (= 1.2)
+  rack-protection (= 1.5.2)
   rack-rewrite (= 1.5.0)
   rack-ssl (= 1.4.1)
   rails (= 4.1.8)