Ruby on Rails Tuesday, October 16, 2018

I've been getting an intermittent spate of this sort of error lately:

Expected(200) <=> Actual(403 Forbidden)
excon.error.response
:body => "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>RequestTimeTooSkewed</Code><Message>The difference between the request time and the current time is too large.</Message><RequestTime>20181015T210406Z</RequestTime><ServerTime>2018-10-15T20:48:43Z</ServerTime><MaxAllowedSkewMilliseconds>900000</MaxAllowedSkewMilliseconds><RequestId>9379DD3E544E87CF</RequestId><HostId>LvBdMDIwvhP1X/jMpfYIaBjZ24h1EmgkU3ZZ+0s+JtaPfWPSlxMQLCoGL67H1C+kIkgMw2u1gtI=</HostId></Error>"

So this tells me that my server is set to ignore any form input that is more than 15 minutes stale. I could raise the limit (presumably this is something that is set via a config), but what hazard is this exposing me to?

Walter

--
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rubyonrails-talk+unsubscribe@googlegroups.com.
To post to this group, send email to rubyonrails-talk@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/E95397E3-39A7-40E0-AC40-201AAD4FAE40%40wdstudio.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment