Skip to content

Instantly share code, notes, and snippets.

@metaskills
Created October 11, 2009 02:39
Show Gist options
  • Save metaskills/207355 to your computer and use it in GitHub Desktop.
Save metaskills/207355 to your computer and use it in GitHub Desktop.
module Rack
class ZombieShotgun
ZOMBIE_AGENTS = [
/FrontPage/,
/Microsoft Office Protocol Discovery/,
/Microsoft Data Access Internet Publishing Provider/
].freeze
ZOMBIE_DIRS = ['_vti_bin','MSOffice','verify-VCNstrict','notified-VCNstrict'].to_set.freeze
attr_reader :options, :request, :agent
def initialize(app, options={})
@app, @options = app, {
:agents => true,
:directories => true
}.merge(options)
end
def call(env)
@agent = env['HTTP_USER_AGENT']
@request = Rack::Request.new(env)
zombie_attack? ? head_not_found : @app.call(env)
end
private
def head_not_found
[404, {"Content-Length" => "0"}, []]
end
def zombie_attack?
zombie_dir_attack? || zombie_agent_attack?
end
def zombie_dir_attack?
path = request.path_info
options[:directories] && ZOMBIE_DIRS.any? { |dir| path.include?("/#{dir}/") }
end
def zombie_agent_attack?
options[:agents] && agent && ZOMBIE_AGENTS.any? { |za| agent =~ za }
end
end
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment