Ignore S3 requests in Rack::Attack

puzzle · Aug 20, 2024 · 36e2915 · 36e2915
1 parent eb6f263
commit 36e2915
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb
@@ -15,8 +15,8 @@
 
 Rack::Attack.safelist "allow S3 redirects" do |request|
   regexes = [
-    %r~https://[^/]+?/rails/active_storage/blobs/redirect/[A-Za-z0-9=]+--[A-Za-z0-9=]+/~,
-    %r~https://[^/]+?/rails/active_storage/representations/redirect/[A-Za-z0-9=]+--[A-Za-z0-9=]+/[A-Za-z0-9=]+--[A-Za-z0-9=]+/~
+    %r~\Ahttps://[^/]+?/rails/active_storage/blobs/redirect/[A-Za-z0-9=]+--[A-Za-z0-9=]+/~,
+    %r~\Ahttps://[^/]+?/rails/active_storage/representations/redirect/[A-Za-z0-9=]+--[A-Za-z0-9=]+/[A-Za-z0-9=]+--[A-Za-z0-9=]+/~
   ]
 
   regexes.any? { _1.match? request.url }