Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Merge pull request from GHSA-c2r5-cfqr-c553

Browse source 
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
This commit is contained in:
Claire 2024-05-30 14:24:29 +02:00 • committed by GitHub
parent 16249946ae
commit 3fa0dd0b88
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 73 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
config/initializers/rack_attack.rb
View file

@ -62,10 +62,6 @@ class Rack::Attack
end
end
Rack::Attack.safelist('allow from localhost') do |req|
req.remote_ip == '127.0.0.1' || req.remote_ip == '::1'
end
Rack::Attack.blocklist('deny from blocklist') do |req|
IpBlock.blocked?(req.remote_ip)
end