method
blocked_hosts
v7.2.3 -
Show latest stable
- Class:
ActionDispatch::HostAuthorization
blocked_hosts(request)private
No documentation available.
# File actionpack/lib/action_dispatch/middleware/host_authorization.rb, line 151
def blocked_hosts(request)
hosts = []
origin_host = request.get_header("HTTP_HOST")
hosts << origin_host unless @permissions.allows?(origin_host)
forwarded_host = request.x_forwarded_host&.split(/,\s?/)&.last
hosts << forwarded_host unless forwarded_host.blank? || @permissions.allows?(forwarded_host)
hosts
end