class HostAuthorization
Ruby on Rails 6.0.6
Since v6.0.6This middleware guards from DNS rebinding attacks by explicitly permitting the hosts a request can be sent to.
When a request comes to an unauthorized host, the response_app application will be executed and rendered. If no response_app is given, a default one will run, which responds with +403 Forbidden+.
Inherits from
Constants
- ActionDispatch::HostAuthorization::ALLOWED_HOSTS_IN_DEVELOPMENT
- ActionDispatch::HostAuthorization::DEFAULT_RESPONSE_APP
- ActionDispatch::HostAuthorization::IPV4_HOSTNAME
- ActionDispatch::HostAuthorization::IPV6_HOSTNAME
- ActionDispatch::HostAuthorization::IPV6_HOSTNAME_WITH_PORT
- ActionDispatch::HostAuthorization::PORT_REGEX
- ActionDispatch::HostAuthorization::VALID_IP_HOSTNAME
Methods (defined here)
Private methods
(2)
Implementation detail — not part of the public API.
Methods (inherited)
From Object (17)
- # acts_like?
- # blank?
- # deep_dup
- # duplicable?
- # html_safe?
- # in?
- # instance_values
- # instance_variable_names
- # presence
- # presence_in
- # present?
- # to_param
- # to_query
- # try
- # try!
- # unescape
- # with_options