Is there anyway to make a Rails / Rack application tell the web server to drop the connection
Posted
by dasil003
on Stack Overflow
See other posts from Stack Overflow
or by dasil003
Published on 2010-04-03T06:47:44Z
Indexed on
2010/04/03
6:53 UTC
Read the original article
Hit count: 491
There are many security reasons why one would want to drop an HTTP connection with no response (eg. OWASP's SSL best practices). When these can be detected at the server level then it's no big deal. However, what if you can only detect this condition at the application level?
Does Rails, or more generally Rack, have any standard way of telling the server to drop the connection without a response? If not, are there some standard headers to pass in that will accomplish that in common web servers (I'm thinking Nginx or Apache)? Even if there is not a standard header is there a reasonable way to configure that behavior? Is this a fool's errand?
© Stack Overflow or respective owner