Rails DDOS Vulnerability Patch

action_view_header_caching_handler.rb

# config/initializers/action_view_header_caching_handler.rb

ActiveSupport.on_load(:action_view) do 
  ActionView::LookupContext::DetailsKey.class_eval do 
    class << self 
      alias :old_get :get 

      def get(details) 
        if details[:formats] 
          details = details.dup 
          syms    = Set.new Mime::SET.symbols 
          details[:formats] = details[:formats].select { |v| 
            syms.include? v 
          } 
        end 
        old_get details 
      end 
    end 
  end 
end