discourse/lib/middleware
Martin Brennan 6eb0d0c38d
SECURITY: Fix is_private_ip for RateLimiter to cover all cases (#12464)
The regular expression to detect private IP addresses did not always detect them successfully.
Changed to use ruby's in-built IPAddr.new(ip_address).private? method instead
which does the same thing but covers all cases.
2021-03-22 13:56:32 +10:00
..
anonymous_cache.rb FIX: Bypass AnonymousCache for /srv/status route. (#11491) 2020-12-16 16:47:46 +11:00
discourse_public_exceptions.rb FIX: avoid superflous logging when mime type is bad 2020-01-02 12:34:38 +11:00
enforce_hostname.rb DEV: apply allow origin response header for CDN requests. (#11893) 2021-01-29 07:44:49 +05:30
missing_avatars.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
omniauth_bypass_middleware.rb FIX: Convert omniauth authenticator names to symbols before comparing 2019-08-14 12:57:11 +01:00
request_tracker.rb SECURITY: Fix is_private_ip for RateLimiter to cover all cases (#12464) 2021-03-22 13:56:32 +10:00
turbo_dev.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00