Merge pull request #23 from zmillman/master

Explain why README examples use 503 to distract attackers
This commit is contained in:
Aaron Suggs 2013-07-12 15:00:03 -07:00
commit 8ece6925aa

View file

@ -165,6 +165,8 @@ Customize the response of blacklisted and throttled requests using an object tha
```ruby
Rack::Attack.blacklisted_response = lambda do |env|
# Using 503 because it may make attacker think that they have successfully
# DOSed the site. Rack::Attack returns 401 for blacklists by default
[ 503, {}, ['Blocked']]
end
@ -176,6 +178,8 @@ Customize the response of blacklisted and throttled requests using an object tha
env['rack.attack.match_data']
].inspect
# Using 503 because it may make attacker think that they have successfully
# DOSed the site. Rack::Attack returns 429 for throttling by default
[ 503, {}, [body]]
end
```