You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jul 13, 2023. It is now read-only.
I want to disable/unregister HttpUrlProxyAdapter because it discloses server's ip. Scenario: attacker submits url to his server as attachment, Paperclip loads file from attacker's server. As a result attacker knows server's real ip even if service uses cloudflare.
The text was updated successfully, but these errors were encountered:
Looks like it is not default adapter. You need to look register method inside your app. Probably it defined in some file inside folder config/initializers/*. For default adapters exists a method. For example: Paperclip.io_adapters.unregister(Paperclip::StringioAdapter)
I want to disable/unregister HttpUrlProxyAdapter because it discloses server's ip. Scenario: attacker submits url to his server as attachment, Paperclip loads file from attacker's server. As a result attacker knows server's real ip even if service uses cloudflare.
The text was updated successfully, but these errors were encountered: