Rails request with HTTP_ACCEPT header of `: */*` -


my rails app threw exception because of actionview::missingtemplate-exception. because request had http header accept value : */*. app couldn't find template format (which expect happen). user agent set mozilla/5.0 (windows nt 6.1; wow64) applewebkit/537.36 (khtml, gecko) chrome/27.0.1453.116 safari/537.36.

i'm curious (and little concerned) means. problem rails, problem app, or attack vector? i've seen answers similar questions (e.g. ruby on rails , strange http_accept header psp) proposed rescue these exception , answer format set html. however, before using approach i'd if : */* acceptable value accept, , browser set that.

i'm on rails 3.2.13.

this known, , ancient, bug in rails' mime type parser - see this bug report details. workarounds exist, fix preferable!


Comments