forked from OpenNeo/impress
allow pet data submissions from private-block IPs, not just 127.0.0.1
This commit is contained in:
parent
a55d1878ea
commit
1070778398
1 changed files with 4 additions and 1 deletions
|
@ -1,3 +1,5 @@
|
||||||
|
require 'ipaddr'
|
||||||
|
|
||||||
class ApplicationController < ActionController::Base
|
class ApplicationController < ActionController::Base
|
||||||
include FragmentLocalization
|
include FragmentLocalization
|
||||||
|
|
||||||
|
@ -27,8 +29,9 @@ class ApplicationController < ActionController::Base
|
||||||
I18n.default_locale
|
I18n.default_locale
|
||||||
end
|
end
|
||||||
|
|
||||||
|
PRIVATE_IP_BLOCK = IPAddr.new('192.168.0.0/16')
|
||||||
def local_only
|
def local_only
|
||||||
raise AccessDenied unless request.ip == '127.0.0.1'
|
raise AccessDenied unless request.ip == '127.0.0.1' || PRIVATE_IP_BLOCK.include?(request.ip)
|
||||||
end
|
end
|
||||||
|
|
||||||
def localized_fragment_exist?(key)
|
def localized_fragment_exist?(key)
|
||||||
|
|
Loading…
Reference in a new issue