From 9dde7d8de047b55ec636c4c7cba89ec95324d492 Mon Sep 17 00:00:00 2001 From: Gannon McGibbon Date: Thu, 8 Nov 2018 14:45:06 -0500 Subject: Ensure external redirects are explicitly allowed Add `fallback_location` and `allow_other_host` options to `redirect_to`. --- actionpack/CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'actionpack/CHANGELOG.md') diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index 1457794354..2000be688f 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,3 +1,9 @@ +* Ensure external redirects are explicitly allowed + + Add `fallback_location` and `allow_other_host` options to `redirect_to`. + + *Gannon McGibbon* + * Introduce ActionDispatch::HostAuthorization This is a new middleware that guards against DNS rebinding attacks by -- cgit v1.2.3