Prevented attack |
IP spoofing |
Supported browsers |
all |
More infos |
Detect (some) IP spoofing attacks.
# File lib/rack/protection/ip_spoofing.rb, line 14 def accepts?(env) return true unless env.include? 'HTTP_X_FORWARDED_FOR' ips = env['HTTP_X_FORWARDED_FOR'].split(/\s*,\s*/) return false if env.include? 'HTTP_CLIENT_IP' and not ips.include? env['HTTP_CLIENT_IP'] return false if env.include? 'HTTP_X_REAL_IP' and not ips.include? env['HTTP_X_REAL_IP'] true end
Generated with the Darkfish Rdoc Generator 2.