class ActionDispatch::HostAuthorization
def call(env)
def call(env) return @app.call(env) if @permissions.empty? request = Request.new(env) hosts = blocked_hosts(request) if hosts.empty? || excluded?(request) mark_as_authorized(request) @app.call(env) else env["action_dispatch.blocked_hosts"] = hosts @response_app.call(env) end end