merenber
/
greenlight
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Remove production check for hosts (#1549)

This commit is contained in:
Ahmad Farhat 2020-05-08 16:09:03 -04:00 committed by GitHub
parent 6104b3d713
commit 6b628d62d3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/application_controller.rb
View File

@ -47,9 +47,8 @@ class ApplicationController < ActionController::Base
# Block unknown hosts to mitigate host header injection attacks
def block_unknown_hosts
return unless Rails.env.production?
return if config.hosts.blank?
raise UnsafeHostError, "#{request.host} is not a safe host" unless config.hosts.include?(request.host)
return if Rails.configuration.hosts.blank?
raise UnsafeHostError, "#{request.host} is not a safe host" unless Rails.configuration.hosts.include?(request.host)
end
# Force SSL