hamptonmoore
/
mastodon
forked from treehouse/mastodon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add guard against DNS rebinding attacks (#16087) 

* Add guard against DNS rebinding attacks

* Fix not to apply to test environment
signup-info-prompt
Takeshi Umeda 2021-04-22 00:45:58 +09:00 committed by GitHub
parent e243092a5a
commit 8323023464
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/initializers/1_hosts.rb
View File

@ -26,4 +26,10 @@ Rails.application.configure do
"ws://#{ENV['REMOTE_DEV'] == 'true' ? host.split(':').first : 'localhost'}:4000" "ws://#{ENV['REMOTE_DEV'] == 'true' ? host.split(':').first : 'localhost'}:4000"
end end
end end
unless Rails.env.test?
config.hosts << host if host.present?
config.hosts << web_host if web_host.present?
config.hosts << alternate_domains if alternate_domains.present?
end
end end