srizan/archived-hc-harbor
1
0
Fork 0
mirror of https://github.com/SrIzan10/hc-harbor.git synced 2026-05-01 10:45:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

parse rack attack keys in the cooler method

Browse Source
This commit is contained in:
Echo
2025-06-27 21:50:58 -04:00
parent 8eb6072612
commit bcc5b03dd5
1 changed files with 2 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
config/initializers/rack_attack.rb
View File

@@ -7,22 +7,14 @@ class Rack::Attack
if ENV["RACK_ATTACK_BYPASS"].present?
begin
bypass_value = ENV["RACK_ATTACK_BYPASS"].strip
bypass_value = bypass_value.gsub(/\A['"]|['"]\z/, "")
bypass_value = bypass_value.gsub(/\\\"/, '"') if bypass_value.include?('\\\"')
TOKENS = JSON.parse(bypass_value).freeze
unless TOKENS.is_a?(Array)
Rails.logger.warn "RACK_ATTACK_BYPASS should be a array, tf is this #{TOKENS.class}"
TOKENS = [].freeze
end
TOKENS = bypass_value.split(",").map(&:strip).reject(&:empty?).freeze
Rails.logger.info "RACK_ATTACK_BYPASS loaded #{TOKENS.length} let me in tokens"
rescue JSON::ParserError => e
rescue => e
Rails.logger.error "RACK_ATTACK_BYPASS failed to read, you fucked it up #{e.message} raw: #{ENV['RACK_ATTACK_BYPASS'].inspect}"
TOKENS = [].freeze
end
Rack::Attack.safelist("bypass with valid token") do |request|
bypass = request.env["HTTP_RACK_ATTACK_BYPASS"]
bypass.present? && TOKENS.include?(bypass)
end
else