diff options
| author | Jacob Vosmaer <contact@jacobvosmaer.nl> | 2014-12-15 20:47:26 +0300 |
|---|---|---|
| committer | Jacob Vosmaer <contact@jacobvosmaer.nl> | 2014-12-15 20:57:42 +0300 |
| commit | 62ea02740d2fff83d636eb659eb5f80dbf1bd888 (patch) | |
| tree | da939d1010ebcd376c9ad9e1bf66acfbbb7e774e /config/initializers/rack_attack_git_basic_auth.rb | |
| parent | 7512016d51feb6c02c3a0322325564b6b7f5ad9c (diff) | |
Block Git HTTP Basic Auth after 10 failed attempts
Diffstat (limited to 'config/initializers/rack_attack_git_basic_auth.rb')
| -rw-r--r-- | config/initializers/rack_attack_git_basic_auth.rb | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/config/initializers/rack_attack_git_basic_auth.rb b/config/initializers/rack_attack_git_basic_auth.rb new file mode 100644 index 00000000000..2348768ff16 --- /dev/null +++ b/config/initializers/rack_attack_git_basic_auth.rb @@ -0,0 +1,10 @@ +unless Rails.env.test? + Rack::Attack.blacklist('Git HTTP Basic Auth') do |req| + Rack::Attack::Allow2Ban.filter(req.ip, Gitlab.config.rack_attack.git_basic_auth) do + # This block only gets run if the IP was not already banned. + # Return false, meaning that we do not see anything wrong with the + # request at this time + false + end + end +end |