BigW Consortium Gitlab

trusted_proxies.rb 854 Bytes
Newer Older
1 2 3 4 5 6 7 8 9
# Override Rack::Request to make use of the same list of trusted_proxies
# as the ActionDispatch::Request object. This is necessary for libraries
# like rack_attack where they don't use ActionDispatch, and we want them
# to block/throttle requests on private networks.
# Rack Attack specific issue: https://github.com/kickstarter/rack-attack/issues/145 
module Rack
  class Request
    def trusted_proxy?(ip)
      Rails.application.config.action_dispatch.trusted_proxies.any? { |proxy| proxy === ip }
10 11
    rescue IPAddr::InvalidAddressError
      false
12 13 14 15
    end
  end
end

16 17 18 19 20 21 22
gitlab_trusted_proxies = Array(Gitlab.config.gitlab.trusted_proxies).map do |proxy|
  begin
    IPAddr.new(proxy)
  rescue IPAddr::InvalidAddressError
  end
end.compact

23
Rails.application.config.action_dispatch.trusted_proxies = (
24
  [ '127.0.0.1', '::1' ] + gitlab_trusted_proxies)