Browse Source
Add guard against DNS rebinding attacks (#16087)
* Add guard against DNS rebinding attacks
* Fix not to apply to test environment
closed-social-v3
Takeshi Umeda
3 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with
6 additions and
0 deletions
-
config/initializers/1_hosts.rb
|
|
@ -26,4 +26,10 @@ Rails.application.configure do |
|
|
|
"ws://#{ENV['REMOTE_DEV'] == 'true' ? host.split(':').first : 'localhost'}:4000" |
|
|
|
end |
|
|
|
end |
|
|
|
|
|
|
|
unless Rails.env.test? |
|
|
|
config.hosts << host if host.present? |
|
|
|
config.hosts << web_host if web_host.present? |
|
|
|
config.hosts << alternate_domains if alternate_domains.present? |
|
|
|
end |
|
|
|
end |