From 1de2e3f980549ce48eeeef99b99ac64987fcce44 Mon Sep 17 00:00:00 2001
From: Jeong Arm <kjwonmail@gmail.com>
Date: Fri, 18 Feb 2022 21:51:51 +0900
Subject: [PATCH] Throttle IPv6 signup for subnet (#17588)
---
config/initializers/rack_attack.rb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb
index 964d4266d2..80c005f819 100644
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@@ -82,7 +82,9 @@ class Rack::Attack
end
throttle('throttle_sign_up_attempts/ip', limit: 25, period: 5.minutes) do |req|
- req.remote_ip if req.post? && req.path == '/auth'
+ return unless req.post? && req.path == '/auth'
+ return req.remote_ip.mask(64) if req.remote_ip.ipv6?
+ req.remote_ip
end
throttle('throttle_password_resets/ip', limit: 25, period: 5.minutes) do |req|
--
GitLab