Sha256: 949c673988f6ee6fd0caf95f470e07e835cbabfbea02e8b21b40aca4739ddc3e
Contents?: true
Size: 839 Bytes
Versions: 7
Compression:
Stored size: 839 Bytes
Contents
require 'padrino-core'
require 'haml'
require 'pact_broker/services'
module PactBroker
module UI
module Controllers
class Base < Padrino::Application
set :root, File.join(File.dirname(__FILE__), '..')
set :show_exceptions, ENV['RACK_ENV'] != 'production'
set :dump_errors, false # The padrino logger logs these for us. If this is enabled we get duplicate logging.
def base_url
# Using the X-Forwarded headers in the UI can leave the app vulnerable
# https://www.acunetix.com/blog/articles/automated-detection-of-host-header-attacks/
# Either use the explicitly configured base url or an empty string,
# rather than request.base_url, which uses the X-Forwarded headers.
env["pactbroker.base_url"] || ''
end
end
end
end
end
Version data entries
7 entries across 7 versions & 1 rubygems