From: Jeong Arm <kjwonmail@gmail.com>
Date: Fri, 18 Feb 2022 12:51:51 +0000 (+0900)
Subject: Throttle IPv6 signup for subnet (#17588)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=1de2e3f980549ce48eeeef99b99ac64987fcce44;p=mastodon.git

Throttle IPv6 signup for subnet (#17588)
---

diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb
index 964d4266d..80c005f81 100644
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@@ -82,7 +82,9 @@ class Rack::Attack
   end
 
   throttle('throttle_sign_up_attempts/ip', limit: 25, period: 5.minutes) do |req|
-    req.remote_ip if req.post? && req.path == '/auth'
+    return unless req.post? && req.path == '/auth'
+    return req.remote_ip.mask(64) if req.remote_ip.ipv6?
+    req.remote_ip
   end
 
   throttle('throttle_password_resets/ip', limit: 25, period: 5.minutes) do |req|