lino.jorzick/greenlight
1
0
Fork 0
forked from External/greenlight
Code Issues Pull Requests Projects Releases Wiki Activity

Remove production check for hosts (#1549)

Browse Source
This commit is contained in:
Ahmad Farhat
2020-05-08 16:09:03 -04:00
committed by GitHub
parent 6104b3d713
commit 6b628d62d3
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/application_controller.rb
View File

@ -47,9 +47,8 @@ class ApplicationController < ActionController::Base
# Block unknown hosts to mitigate host header injection attacks
def block_unknown_hosts
return unless Rails.env.production?
return if config.hosts.blank?
raise UnsafeHostError, "#{request.host} is not a safe host" unless config.hosts.include?(request.host)
return if Rails.configuration.hosts.blank?
raise UnsafeHostError, "#{request.host} is not a safe host" unless Rails.configuration.hosts.include?(request.host)
end
# Force SSL