debian-mirror-gitlab/config/initializers/trusted_proxies.rb

38 lines
1.2 KiB
Ruby
Raw Normal View History

2016-08-24 12:49:21 +05:30
# Override Rack::Request to make use of the same list of trusted_proxies
# as the ActionDispatch::Request object. This is necessary for libraries
# like rack_attack where they don't use ActionDispatch, and we want them
# to block/throttle requests on private networks.
2018-03-17 18:26:18 +05:30
# Rack Attack specific issue: https://github.com/kickstarter/rack-attack/issues/145
2016-08-24 12:49:21 +05:30
module Rack
class Request
def trusted_proxy?(ip)
Rails.application.config.action_dispatch.trusted_proxies.any? { |proxy| proxy === ip }
rescue IPAddr::InvalidAddressError
false
end
end
end
gitlab_trusted_proxies = Array(Gitlab.config.gitlab.trusted_proxies).map do |proxy|
begin
IPAddr.new(proxy)
rescue IPAddr::InvalidAddressError
end
end.compact
2016-06-02 11:05:42 +05:30
Rails.application.config.action_dispatch.trusted_proxies = (
2017-08-17 22:00:37 +05:30
['127.0.0.1', '::1'] + gitlab_trusted_proxies)
2018-10-15 14:42:47 +05:30
# A monkey patch to make trusted proxies work with Rails 5.0.
# Inspired by https://github.com/rails/rails/issues/5223#issuecomment-263778719
# Remove this monkey patch when upstream is fixed.
if Gitlab.rails5?
module TrustedProxyMonkeyPatch
def ip
@ip ||= (get_header("action_dispatch.remote_ip") || super).to_s
end
end
ActionDispatch::Request.send(:include, TrustedProxyMonkeyPatch)
end