1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/actionpack/lib/action_dispatch/middleware
Edouard CHIN 378b4fedb1 Add the Mime::Type::InvalidMimeType error in the default rescue_response:
- https://github.com/rails/rails/pull/35604 introduced a vulnerability fix
  to raise an error in case the `HTTP_ACCEPT` headers contains malformated
  mime type.

  This will cause applications to throw a 500 if a User Agent sends an
  invalid header.

  This PR adds the `InvalidMimeType` in the default `rescue_responses` from
  the ExceptionWrapper and will return a 406. I looked up the HTTP/1.1
  RFC and it doesn't stand what should be returned when the UA
  sends malformated mime type. Decided to get 406 as it seemed to be the
  status the better suited for this.
2019-03-26 02:03:47 +01:00
..
session Fix possible dev mode RCE 2019-03-10 21:30:03 -07:00
templates Show friendly message to install action mailbox if the related table does not exist 2019-03-12 17:01:36 +05:30
callbacks.rb Enable Style/RedundantBegin cop to avoid newly adding redundant begin block 2018-12-21 06:12:42 +09:00
cookies.rb Don't override @set_cookies on CookieJar#update_cookies_from_jar' 2019-03-17 01:26:51 -03:00
debug_exceptions.rb Add the Mime::Type::InvalidMimeType error in the default rescue_response: 2019-03-26 02:03:47 +01:00
debug_locks.rb
debug_view.rb Turn lookup context in to a stack, push and pop if formats change 2019-02-11 17:55:59 -08:00
exception_wrapper.rb Add the Mime::Type::InvalidMimeType error in the default rescue_response: 2019-03-26 02:03:47 +01:00
executor.rb
flash.rb
host_authorization.rb Cleanup the whitelisting references after #33145 2019-02-03 10:58:10 +02:00
public_exceptions.rb Add the Mime::Type::InvalidMimeType error in the default rescue_response: 2019-03-26 02:03:47 +01:00
reloader.rb
remote_ip.rb Enable Style/RedundantBegin cop to avoid newly adding redundant begin block 2018-12-21 06:12:42 +09:00
request_id.rb
show_exceptions.rb Fixed a bug where the debug view does not show the error page properly 2019-01-24 20:30:20 -05:00
ssl.rb
stack.rb Instrument middleware processing 2019-03-19 08:35:09 -07:00
static.rb