# Un attacco a Rails

**URL:** <https://www.ruby-forum.com/t/un-attacco-a-rails/227786>\
**Category:** IT\
**Created:** [March 28, 2013, 5:53pm UTC](https://www.ruby-forum.com/t/un-attacco-a-rails/227786 "2013-03-28T17:53:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pm3](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/a87d85/32.png) [@pm3](https://www.ruby-forum.com/u/pm3)\
**Post date:** [March 28, 2013, 5:53pm UTC](https://www.ruby-forum.com/t/un-attacco-a-rails/227786/1 "2013-03-28T17:53:27Z")

</div>

Nel production log di una mia applicazione in produzione ho trovato

Started GET  
“/assets/&&!yt.test(e)&&(v.support.htmlSerialize||!wt.test(e))&&(v.support.leadingWhitespace||!pt.test(e))&&!Nt[(vt.exec(e)||[”  
for … at …  
Processing by HomeController#routing\_error as  
Parameters:  
{“path”=\>“assets/&&!yt.test(e)&&(v.support.htmlSerialize||!wt.test(e))&&(v.support.leadingWhitespace||!pt.test(e))&&!Nt[(vt”}  
Completed 406 Not Acceptable in 49ms (ActiveRecord: 0.1ms)

Googlando ho trovato

> <https://stackoverflow.com/questions/15127386/script-kiddie-attempts-triggering-rails-uriinvalidurierror-how-to-filter>

a cui ho aggiunto la mia esperienza.

Facendo un grep ne ho un po’ a partire dal 15 marzo.

Qualcuno di voi ha trovato tracce di attacchi simili (andate a  
controllare)

zgrep yt.test log/production.log\*gz|less

Paolo

---

<div class="post-metadata">

**Author:** ![pm3](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/a87d85/32.png) [@pm3](https://www.ruby-forum.com/u/pm3)\
**Post date:** [March 29, 2013, 4:05pm UTC](https://www.ruby-forum.com/t/un-attacco-a-rails/227786/2 "2013-03-29T16:05:23Z")

</div>

Ho controllato e ho trovato lo stesso tentativo 3 volte lo scorso  
novembre.

Andrea

On Mar 28, 2013, at 5:53 PM, Paolo M. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> Paolo
> 
> –  
> Posted via [http://www.ruby-forum.com/](http://www.ruby-forum.com/).
> 
> * * *
> 
> Ml mailing list  
> [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> [http://lists.ruby-it.org/mailman/listinfo/ml](http://lists.ruby-it.org/mailman/listinfo/ml)

Andrea C.  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)