Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

banditj

banditj

Not a member

banditj's latest activity

Wednesday, February 16 2011
6438 rails security bug - request.remote_ip/X-Forwarded-For not sanitized was created in Ruby on Rails
  • banditj
    banditj created the ticket at 2:41 AM

    hi,

    X-Forwarded-For headerfield isn't sanatized if the request comes from a class c network.

    i made a poc screencast that shows the bug with the latest rails ve...