Rails Info Controller

Who knew? There’s a built-in Rails::InfoController that displays the same stuff as script/about. It’s only enabled in development mode. I found this as I was digging into a strange bootup error and haven’t seen it discussed before. It’s interesting what you can find in the nooks and crannies of the rails code. Oddly, it doesn’t respond to the index action, so you have to use the path /rails/info/properties. This link http://localhost:3000/rails/info/properties will take you to it if you have a local rails app deployed on port 3000. I can’t think of any reason someone would do this, but don’t deploy to the public in development mode. This controller would give a hacker extra information on your site.

potential differences [/ruby-rails] permalink