instance method `_url_host_allowed?`

Ruby on Rails 8.1.2

Since v5.2.8.1 Private

Available in: v5.2.8.1 v6.0.6 v6.1.7.10 v7.0.10 v7.1.6 v7.2.3 v8.0.4 v8.1.2

Compare with:

_url_host_allowed?(url)

No documentation comment.

Parameters

url req

Source

# File actionpack/lib/action_controller/metal/redirecting.rb, line 304
      def _url_host_allowed?(url)
        url_to_s = url.to_s
        host = URI(url_to_s).host

        if host.nil?
          url_to_s.start_with?("/") && !url_to_s.start_with?("//")
        else
          host == request.host || self.class.allowed_redirect_hosts_permissions&.allows?(host)
        end
      rescue ArgumentError, URI::Error
        false
      end

Defined in actionpack/lib/action_controller/metal/redirecting.rb line 304 · View on GitHub · Improve this page · Find usages on GitHub

Defined in ActionController::Redirecting

Signature

Parameters