gitlab-org--gitlab-foss/config/initializers/rack_attack.rb.example

19 lines
765 B
Plaintext
Raw Normal View History

2013-11-06 12:10:59 +00:00
# 1. Rename this file to rack_attack.rb
# 2. Review the paths_to_be_protected and add any other path you need protecting
#
paths_to_be_protected = [
"#{Rails.application.config.relative_url_root}/users/password",
"#{Rails.application.config.relative_url_root}/users/sign_in",
"#{Rails.application.config.relative_url_root}/api/#{API::API.version}/session.json",
"#{Rails.application.config.relative_url_root}/api/#{API::API.version}/session",
2013-12-24 09:11:33 +00:00
"#{Rails.application.config.relative_url_root}/users",
"#{Rails.application.config.relative_url_root}/users/confirmation"
]
2013-11-21 15:04:23 +00:00
unless Rails.env.test?
Rack::Attack.throttle('protected paths', limit: 10, period: 60.seconds) do |req|
2013-11-21 15:04:23 +00:00
req.ip if paths_to_be_protected.include?(req.path) && req.post?
end
end