rails/guides
Tim Aßmann ca96df2549
add section for host header attack prevention in rails security guide (#43330)
* add section for host header attack prevention in rails security guide

* Fix wrong rails setting key for HostAuthorization middleware

The original documention was wrong, the rails configuration key is called host_authorization.

* add a short intro on how dns rebinding attacks work

* Apply suggestions from code review

Co-authored-by: Rafael Mendonça França <rafael@franca.dev>

Co-authored-by: Rafael Mendonça França <rafael@franca.dev>
2022-05-20 23:42:41 +05:30
..
assets Use the CSS badge for the API docs as well 2022-05-10 21:05:59 +02:00
bug_report_templates No need to check for Ruby version on the bug reports template anymore 2022-01-06 20:50:33 +00:00
rails_guides Fix spelling 2022-03-27 05:19:40 +10:00
source add section for host header attack prevention in rails security guide (#43330) 2022-05-20 23:42:41 +05:30
.document
CHANGELOG.md Start Rails 7.1 development 2021-12-07 15:52:30 +00:00
rails_guides.rb Use safe nav operator when calling RailsGuides::Generator.new 2018-12-05 12:41:07 +09:00
Rakefile Run the gem template guides for 3.1 now that 7.0.1 is out 2022-01-06 21:56:06 +00:00
w3c_validator.rb