From 10707783981bc0ea3357378e4f64dc6f2b4d7245 Mon Sep 17 00:00:00 2001 From: Matchu Date: Sat, 18 Jul 2015 01:04:53 -0400 Subject: [PATCH] allow pet data submissions from private-block IPs, not just 127.0.0.1 --- app/controllers/application_controller.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 0e49ffee..7484284b 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -1,3 +1,5 @@ +require 'ipaddr' + class ApplicationController < ActionController::Base include FragmentLocalization @@ -27,8 +29,9 @@ class ApplicationController < ActionController::Base I18n.default_locale end + PRIVATE_IP_BLOCK = IPAddr.new('192.168.0.0/16') def local_only - raise AccessDenied unless request.ip == '127.0.0.1' + raise AccessDenied unless request.ip == '127.0.0.1' || PRIVATE_IP_BLOCK.include?(request.ip) end def localized_fragment_exist?(key)