From 1de2e3f980549ce48eeeef99b99ac64987fcce44 Mon Sep 17 00:00:00 2001 From: Jeong Arm Date: Fri, 18 Feb 2022 21:51:51 +0900 Subject: [PATCH] Throttle IPv6 signup for subnet (#17588) --- config/initializers/rack_attack.rb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index 964d4266d2..80c005f819 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -82,7 +82,9 @@ class Rack::Attack end throttle('throttle_sign_up_attempts/ip', limit: 25, period: 5.minutes) do |req| - req.remote_ip if req.post? && req.path == '/auth' + return unless req.post? && req.path == '/auth' + return req.remote_ip.mask(64) if req.remote_ip.ipv6? + req.remote_ip end throttle('throttle_password_resets/ip', limit: 25, period: 5.minutes) do |req|