rails--rails/railties/lib
Rafael Mendonça França 4ace047c91
Add back Rack::Runtime to the default middleware stack.
We were planning to remove this middleware because we thought it could
make easier to attacker to do a Time Attack. However, while
Rack::Runtime can indeed be used to know how long a request took, and
compare with other requests, it doesn't provide any information that
can't be found in the total time of the request as well.

Instead of removing the middleware, we decided to keep it, and direct
users to instead of removing it, use its information to uncover actions
that are vulnerable to Time Attack.

This reverts commit 127dd06df6, reversing
changes made to 4354e3ae49.
2021-09-15 18:37:34 -04:00
..
minitest Fix backtraces for generated plugin tests 2020-10-07 15:40:56 -05:00
rails Add back Rack::Runtime to the default middleware stack. 2021-09-15 18:37:34 -04:00
rails.rb Add benchmark method that can be called from anywhere 2020-12-04 15:52:10 +03:00