blocks|key|754845|text|我将Rails.application.config.hosts+<<+"xxxxxxx-xxxxxxx.c9users.io"添加到config/application.rb中，它很好地修复了我的测试应用程序。然后我对我真正的应用程序做了这件事，它也成功了。问题是，设计抛出了一个错误，这显然不会被修复，至少要到Rails+6测试版。我想我将回到Carrierwave，以满足图像大小的需要，直到ActiveStorage更加成熟。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|754846|entityMap^0|2|1Q|1V|L|4U|B|5J|D|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]|$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|G|$]]

I added <code>Rails.application.config.hosts &lt;&lt; &quot;xxxxxxx-xxxxxxx.c9users.io&quot;</code> to <code>config/application.rb</code> and it fixed my test app fine. Then I did it to my real app and it also worked. The problem is, Devise threw an error as well, which apparently won't be fixed until at least Rails 6 beta. I guess I'm going back to <code>Carrierwave</code> for my image sizing needs until <code>ActiveStorage</code> is more mature.

blocks|key|1886135|text|阻塞主机是Rails+6的一个新特性。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1886136|config.hosts+<<+/[a-z0-9]%2B\.c9users\.io/|code-block|syntax|javascript|1886137|对于ngrok用户，只需将上面的c9users替换为ngrok|offset|length|style|CODE|1886138|更新：+ngrok当前在URL中使用-和.作为子域，所以这应该是精确的config.hosts+<<+/[a-z0-9-.]%2B\.ngrok\.io/|BOLD|1886139|来源：https://github.com/MikeRogers0/puma-ngrok-tunnel|1886140|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/MikeRogers0/puma-ngrok-tunnel^0|0|0|G|7|Q|5|0|0|3|I|1|K|1|Z|14|0|3|1C|0|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|10|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|11|8|@$I|12|J|13|K|L]|$I|14|J|15|K|L]]|9|@]|A|$]]|$1|M|3|N|5|6|7|16|8|@$I|17|J|18|K|O]|$I|19|J|1A|K|L]|$I|1B|J|1C|K|L]|$I|1D|J|1E|K|L]]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1F|8|@]|9|@$I|1G|J|1H|1|1I]]|A|$]]|$1|R|3|-4|5|6|7|1J|8|@]|9|@]|A|$]]]|S|$T|$5|U|V|W|A|$X|Y]]]]

The Blocked Host is a new feature of Rails 6. You can add this pattern to your <code>config/environments/development.rb</code> to have no worries of that in case of dynamic urls
<pre><code>config.hosts &lt;&lt; /[a-z0-9]+\.c9users\.io/
</code></pre>
Also for ngrok user, just replace above <code>c9users</code> by <code>ngrok</code>
Update: ngrok is currently using <code>-</code> and <code>.</code> as subdomain in their URLs so this should be accurate <code>config.hosts &lt;&lt; /[a-z0-9-.]+\.ngrok\.io/</code>
Source: <a href="https://github.com/MikeRogers0/puma-ngrok-tunnel" rel="noreferrer">https://github.com/MikeRogers0/puma-ngrok-tunnel</a>

blocks|key|1886085|text|如果要在开发环境中禁用此功能，可以将config.hosts.clear添加到config/environments/development.rb中。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1886086|entityMap^0|I|I|13|Y|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

If you want to disable this functionality on your development environment, you can add <code>config.hosts.clear</code> to <code>config/environments/development.rb</code>.

blocks|key|2729270|text|将这行添加到config/environments/development.rb|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2729271|config.hosts+<<+/.*\.ngrok\.io/|code-block|syntax|javascript|2729272|重新启动您的rails服务器，它将工作|BOLD|2729273|entityMap|0|LINK|mutability|MUTABLE|url|https://rubular.com/r/wNBqWa2YKKd75I^0|6|Y|1|1|0|0|0|0|4|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@$9|Y|A|Z|1|10]]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@$9|13|A|14|B|M]]|D|@]|E|$]]|$1|N|3|-4|5|6|7|15|8|@]|D|@]|E|$]]]|O|$P|$5|Q|R|S|E|$T|U]]]]

Add <a href="https://rubular.com/r/wNBqWa2YKKd75I" rel="noreferrer">this</a> line to <code>config/environments/development.rb</code>
<pre class="lang-rb prettyprint-override"><code>config.hosts &lt;&lt; /.*\.ngrok\.io/
</code></pre>
Restart your rails server and it will work

blocks|key|2729207|text|这个文章适用于我：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2729208|第一个选项是在config/environments/development.rb中白名单主机名：
Rails.application.configure+do+config.hosts+<<+"+hostname“#+Whitelist+--一个主机名config.hosts+<<+/applic.local\z/#白名单--测试域结束|ordered-list-item|style|CODE|2729209|第二个选项是清除整个白名单，它允许通过对所有主机名的请求：
Rails.application.configure+do+config.hosts.clear端|2729210|功劳归于Manfred+。|BOLD|2729211|entityMap|0|LINK|mutability|MUTABLE|url|https://www.fngtps.com/2019/rails6-blocked-host/^0|2|2|0|0|7|Y|0|0|4|8|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|D|3|E|5|F|7|Z|8|@$A|10|B|11|G|H]]|9|@]|C|$]]|$1|I|3|J|5|F|7|12|8|@]|9|@]|C|$]]|$1|K|3|L|5|6|7|13|8|@$A|14|B|15|G|M]]|9|@]|C|$]]|$1|N|3|-4|5|6|7|16|8|@]|9|@]|C|$]]]|O|$P|$5|Q|R|S|C|$T|U]]]]

This <a href="https://www.fngtps.com/2019/rails6-blocked-host/" rel="noreferrer">article</a> worked for me:

<ol>
<li>The first option is to whitelist the hostnames in <code>config/environments/development.rb</code>:

<pre><code>Rails.application.configure do
 config.hosts &lt;&lt; "hostname" # Whitelist one hostname
 config.hosts &lt;&lt; /application\.local\Z/ # Whitelist a test domain
end
</code></pre></li>
<li>The second option is to clear the entire whitelist, which lets through requests for all hostnames:

<pre><code>Rails.application.configure do
 config.hosts.clear
end
</code></pre></li>
</ol>

Credit goes to Manfred Stienstra.

blocks|key|2729331|text|要允许来自ngrok.io+(或其他服务)的任何子域的请求，最简单的解决方案是将其与.放在一起，如下所示：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2729332|#+config/environments/development.rb

Rails.application.configure+do

++...

++config.hosts+<<+'.ngrok.io'
end|code-block|syntax|javascript|2729333|不需要对子域使用regexp，就像其他答案中提到的那样。|2729334|PS:不要像其他一些答案中提到的那样，通过执行config.hosts.clear来禁用此功能，因为这违背了Rails的DNS重新绑定保护的目的，而且在适当的情况下，外部攻击者可以完全访问本地Rails应用程序信息(来源)。|2729335|entityMap|0|LINK|mutability|MUTABLE|url|https://blog.saeloun.com/2019/10/31/rails-6-adds-guard-against-dns-rebinding-attacks.html^0|5|8|16|1|0|0|0|N|I|30|2|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|D|@]|E|$]]|$1|M|3|N|5|6|7|13|8|@$9|14|A|15|B|C]]|D|@$9|16|A|17|1|18]]|E|$]]|$1|O|3|-4|5|6|7|19|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]]]

To allow requests from any subdomain of <code>ngrok.io</code> (or other service), the simplest solution is to prepend it with <code>.</code> like so:
<pre><code># config/environments/development.rb

Rails.application.configure do

 ...

 config.hosts &lt;&lt; '.ngrok.io'
end
</code></pre>
No need to use a regexp for subdomains like mentioned in some other answers.
PS: don't disable this functionality by doing <code>config.hosts.clear</code> as mentioned in some other answers, as this defeats the purpose of Rails' DNS rebinding protection, and under the right circumstances an outside attacker could gain full access to your local Rails app information (<a href="https://blog.saeloun.com/2019/10/31/rails-6-adds-guard-against-dns-rebinding-attacks.html" rel="noreferrer">source</a>).

blocks|key|2729304|text|在Rails+6中，当您希望允许主机从ngrok+v2.3.40中运行时，请将此配置添加到config/environments/development.rb中|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2729305|config.hosts+<<+/[a-z0-9\-]%2B\.ap\.ngrok\.io/|code-block|syntax|javascript|2729306|重新启动服务器并享受|2729307|entityMap^0|1|7|J|D|19|Y|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|X|8|@]|D|@]|E|$]]]|N|$]]

In <code>Rails 6</code>, when you want to allow host from <code>ngrok v2.3.40</code>, add this config into <code>config/environments/development.rb</code>
<pre><code>config.hosts &lt;&lt; /[a-z0-9\-]+\.ap\.ngrok\.io/
</code></pre>
Restart server and enjoy

blocks|key|1886350|text|将这一行添加到config/environments/development.rb|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1886351|config.hosts+<<+/.%2B\.ngrok\.io:\d%2B/|offset|length|style|CODE|1886352|我看到的大多数响应都缺少URL的端口部分。如果要在特定端口(通常是:3000)访问该URL，则正则表达式的:\d%2B部分是必需的。|1886353|它将在重新启动服务器后工作。|1886354|entityMap^0|0|0|Z|0|X|5|1H|4|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@$D|P|E|Q|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|R|8|@$D|S|E|T|F|G]|$D|U|E|V|F|G]]|9|@]|A|$]]|$1|J|3|K|5|6|7|W|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|X|8|@]|9|@]|A|$]]]|M|$]]

Add this line to config/environments/development.rb
<code>config.hosts &lt;&lt; /.+\.ngrok\.io:\d+/</code>
Most of the responses I see are missing the port part of the URL. If you are accessing this URL in a specific port (typically <code>:3000</code>) the <code>:\d+</code> part of the regular expression is necessary.
It will work after restarting your server.

blocks|key|754773|text|在Rails+6操作包中引入了ActionDispatch::HostAuthorization，默认情况下只允许IPAddr.new(“0.0.0.0/0”)、IPAddr.new(“：：/0”)、“localhost”|type|unstyled|depth|inlineStyleRanges|entityRanges|data|754774|您可以在文件config/application.rb中添加RegExp、Proc、IPAddr和String的数组或单个字符串。|754775|class+Application+<+Rails::Application
++config.hosts+<<+"xxxxxxx-xxxxxxx.c9users.io"
++...
end|code-block|syntax|javascript|754776|来自"https://drivy.engineering/rails-6-unnoticed-features"：|offset|length|754777|Rails+6添加了一个名为ActionDispatch::HostAuthorization的新中间件，允许您为应用程序白名单某些主机，并防止主机头攻击。您可以轻松地使用字符串、IPAddr、Proc和RegExp配置它(在处理通配符域时很有用)。|blockquote|754778|entityMap|0|LINK|mutability|MUTABLE|url|https://drivy.engineering/rails-6-unnoticed-features|1|https://dzone.com/articles/what-is-a-host-header-attack^0|0|0|0|3|1G|0|0|20|5|1|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|10|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|11|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|12|8|@]|9|@$K|13|L|14|1|15]]|A|$]]|$1|M|3|N|5|O|7|16|8|@]|9|@$K|17|L|18|1|19]]|A|$]]|$1|P|3|-4|5|6|7|1A|8|@]|9|@]|A|$]]]|Q|$R|$5|S|T|U|A|$V|W]]|X|$5|S|T|U|A|$V|Y]]]]

In Rails 6 Action Pack introduced ActionDispatch::HostAuthorization and by default allows only [IPAddr.new(“0.0.0.0/0”), IPAddr.new(“::/0”), “localhost”]

You can add arrays of RegExp, Proc, IPAddr and String or a single String in the file config/application.rb like this

<pre><code>class Application &lt; Rails::Application
 config.hosts &lt;&lt; "xxxxxxx-xxxxxxx.c9users.io"
 ...
end
</code></pre>

From "<a href="https://drivy.engineering/rails-6-unnoticed-features" rel="nofollow noreferrer">https://drivy.engineering/rails-6-unnoticed-features</a>":

<blockquote>
 Rails 6 added a new middleware called
 ActionDispatch::HostAuthorization allowing you to whitelist some hosts
 for your application and preventing <a href="https://dzone.com/articles/what-is-a-host-header-attack" rel="nofollow noreferrer">Host header attacks</a>. You can
 easily configure it with a String, IPAddr, Proc and RegExp (useful
 when dealing with wildcard domains).
</blockquote>

blocks|key|1886378|text|config.hosts+=+nil|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1886379|在development.rb中使用这个并重新启动您的rails服务器，它对我是有效的，它将工作。|1886380|entityMap^0|0|I|0|1|E|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|P|8|@]|D|@]|E|$]]]|I|$]]

<code>config.hosts = nil</code>
Use this in <code>development.rb</code> and and restart your rails server, it works for me, it will work.

blocks|key|1886256|text|提示:您可以用配置application.config.hosts+<<+'your_unvalid_host_name'白名单您的主机，但仍然有错误。在这种情况下，错误消息当前不准确。看这个问题。您不应该在下划线中使用主机名。注：application.config.hosts.clear正在处理这个案子。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1886257|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/rails/rails/issues/41545^0|9|1G|38|U|2O|2|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]|$9|Q|A|R|B|C]]|D|@$9|S|A|T|1|U]]|E|$]]|$1|F|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]]]

HEADS UP : You may whitelist your host with the config <code>application.config.hosts &lt;&lt; 'your_unvalid_host_name'</code> but still have the error.
The error message is currently not accurate in this case. See this <a href="https://github.com/rails/rails/issues/41545" rel="nofollow noreferrer">issue</a>.
You should not use hostname with underscore.
NB: The <code>application.config.hosts.clear</code> is working in this case.

blocks|key|2729366|text|为了支持ngrok子域名和区域中的连字符，需要将config/environments/development.rb+config.hosts更改为/[a-z0-9.-]%2B.ngrok.io/。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2729367|示例：|2729368|++config.hosts+=+(config.hosts+rescue+[])+<<+/[a-z0-9.-]%2B.ngrok.io/|code-block|syntax|javascript|2729369|entityMap^0|O|Y|1N|C|22|M|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|V|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|W|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|X|8|@]|D|@]|E|$]]]|N|$]]

In order to support hyphens in the ngrok subdomain name and region, you need to change <code>config/environments/development.rb</code> change <code>config.hosts</code> to <code>/[a-z0-9.-]+.ngrok.io/</code>
Example:
<pre><code> config.hosts = (config.hosts rescue []) &lt;&lt; /[a-z0-9.-]+.ngrok.io/
</code></pre>

blocks|key|2729345|text|首先在其中一个终端运行ngrok+3000，然后打开新终端并运行rails+.现在你可以看到ngrok和rails都可以同时运行.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2729346|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

1st run the ngrok 3000 in one of the terminals and next open the new terminal and run rails s... then u can see now ngrok and rails s both can run simultaneously...

I needed the new function in ActiveStorage to resize_to_fill so I upgraded to Ruby 2.5.1 and Rails 6.
<pre><code>ruby '2.5.1'

gem &quot;rails&quot;, github: &quot;rails/rails&quot;
</code></pre>
When I stopped, then restarted my server (Cloud 9), I received the below Rails error:
<pre><code>Blocked host: xxxxxxx-xxxxxxx.c9users.io
To allow requests to xxxxxxx-xxxxxxx.c9users.io, add the following configuration:

Rails.application.config.hosts &lt;&lt; &quot;xxxxxxx-xxxxxxx.c9users.io&quot;
</code></pre>
I've tried restarting, new windows, but nothing worked. I've never seen this error before. I'm guessing the new version of Rails is doing something?

Upgraded Rails to 6, getting Blocked host Error

5位重磅专家聚焦 AI 时代开发者核心成长需求，带你深入解锁全栈进化、人机协作关键路径！点击报名到场：<a href="https://cloud.tencent.com/developer/salon/salon-2403/signup" target="_blank">https://cloud.tencent.com/developer/salon/salon-2403/signup</a> 
 <img src="https://qcloudimg.tencent-cloud.cn/raw/487c82639d2338df3ef66dfb1450601a.png"/>

腾讯技术创作特训营「年度论坛」正在报名中！

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我需要ActiveStorage中的新函数到resize_to_fill，所以我升级到Ruby2.5.1和Rails 6。ruby '2.5.1'gem "rails", github: "rails/rails"当我停止时，然后重新启动服务器(Cloud9)，我收到了以下Rails错误：Blocked host: xxxxxxx-xxxxxxx.c9users.ioTo allow reques

问将Rails升级到6，被阻塞的主机错误
EN

回答 13

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将Rails升级到6，被阻塞的主机错误EN

回答 13

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将Rails升级到6，被阻塞的主机错误
EN