rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Explain the possible precautions	Andre Arko	2013-01-02	1	-3/+4
\|
*	Restore original remote_ip algorithm.	Andre Arko	2013-01-02	1	-53/+112
\| \| \| \| \| \| \| \| \| \| \|	Proxy servers add X-Forwarded-For headers, resulting in a list of IPs. We remove trusted IP values, and then take the last given value, assuming that it is the most likely to be the correct, unfaked value. See [1] for a very thorough discussion of why that is the best option we have at the moment. [1]: http://blog.gingerlime.com/2012/rails-ip-spoofing-vulnerabilities-and-protection/ Fixes #7979
*	memoize calculated ip without additional variable	Sergey Nartimov	2012-11-01	1	-6/+4
\| \| \| \|	There is no need in additional `@calculated_ip` instance variable.
*	Valid ips v4 and v6. Right logic for working with X-FORWARDED-FOR header and ↵	Alexey Gaziev	2012-04-25	1	-22/+68
\| \| \| \|	tests.
*	Merge pull request #2490 from gsterndale/x_forwarded_for_order	José Valim	2012-02-07	1	-1/+1
\|\ \| \| \| \|	The first IP address in the X-Forwarded-For header is the originating IP
\| *	The first IP address in the X-Forwarded-For header is the originating IP	Greg Sterndale	2012-02-07	1	-1/+1
\| \|
* \|	Trusted proxies is replaced with a Regexp or appended to with a String	Greg Sterndale	2012-02-07	1	-4/+6
\|/
*	Fix routing test to use assert_equal	Carlos Antonio da Silva	2012-01-06	1	-2/+2
\|
*	It should be @calculated_ip not @calculate_ip	Arun Agrawal	2011-11-17	1	-1/+1
\| \| \| \|	We are using @calculated_ip. @calculate_ip is no where used
*	Initialize our instance variables.	Aaron Patterson	2011-11-16	1	-1/+3
\|
*	:facepalm: Request#remote_ip has to work without the middleware	Andre Arko	2011-11-16	1	-1/+1
\|
*	Revert "Revert "Merge pull request #3640 from indirect/remote_ip""	Andre Arko	2011-11-16	1	-3/+6
\| \| \| \|	This reverts commit 8d1a2b3ecde5a8745b3eaab4763a71d80ca3441f, because I have fixed the issues this commit caused in the next commit.
*	Revert "Merge pull request #3640 from indirect/remote_ip"	Jon Leighton	2011-11-15	1	-6/+3
\| \| \| \| \| \| \| \|	This reverts commit 6491aadc525b8703708e0fd0fbf05bd436a47801, reversing changes made to 83bf0b626cf2134260903e57d74f67de57384073. See https://github.com/rails/rails/pull/3640#issuecomment-2752761 for explanation.
*	GetIp#to_s should never return nil. That's icky.	Andre Arko	2011-11-14	1	-3/+6
\|
*	memoize the relatively expensive remote IP code	Andre Arko	2011-11-14	1	-1/+7
\|
*	cleaner names	Andre Arko	2011-11-14	1	-6/+6
\|
*	remove ignored flag, fixes warnings	Andre Arko	2011-11-13	1	-1/+1
\|
*	turns out the tests expect remote_addrs.first	Andre Arko	2011-11-13	1	-1/+1
\|
*	correctly raise IpSpoofAttackError message	Andre Arko	2011-11-13	1	-2/+2
\|
*	defer calculating the remote IP until requested	Andre Arko	2011-11-12	1	-24/+36
\|
*	refactor RemoteIp middleware	Andre Arko	2011-11-11	1	-37/+44
\| \| \| \| \| \| \| \| \| \| \|	- return the last forwarded IP before REMOTE_ADDR to handle proxies - remove completely superfluous RemoteIpGetter class - remove duplication of trusted proxies regexp - remove unused constant from Request - move comments from Request to where they are actually relevant - edit comments for clarity of purpose The original code (confusingly) tried to return REMOTE_ADDR both at the beginning and the end of the chain of options. Since REMOTE_ADDR is _always_ set, this is kind of silly. This change leaves REMOTE_ADDR as the last option, so that proxied requests will be assigned the correct remote IP address.
*	Move remote_ip to a middleware:	Carlhuda	2010-03-03	1	-0/+51
	* ActionController::Base.ip_spoofing_check deprecated => config.action_dispatch.ip_spoofing_check * ActionController::Base.trusted_proxies deprecated => config.action_dispatch.trusted_proxies