# Mime::Type::InvalidMimeType - 这是黑客攻击吗？

**URL:** <https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087>\
**Category:** Support\
**Created:** [2021年四月1日 09:42 UTC](https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087 "2021-04-01T09:42:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Don](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/don/32/228726_2.png) [@Don](https://meta.discourse.org/u/Don)\
**Post date:** [2021年四月1日 09:42 UTC](https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087/1 "2021-04-01T09:42:35Z")

</div>

大家好，

我需要对此采取什么措施吗？我们大概每天会收到两次。addheader 的值总是不同的随机字符串。

![Screenshot 2021-04-01 at 11.31.24](https://cdck-file-uploads-global.s3.dualstack.us-west-2.amazonaws.com/meta/optimized/3X/0/9/09a0e178f1ba37f9441755c1736fc22ae6fd9a12_2_690x29.png)

感谢您的回复 🙂

来自日志：

> **INFO**
>
> ```
> Mime::Type::InvalidMimeType ("%{#context['com.opensymphony.xwork2.dispatcher.httpservletresponse'].addheader('lffk5fkc'" 不是有效的 MIME 类型)
> lib/middleware/omniauth_bypass_middleware.rb:71:in `call'
> lib/content_security_policy/middleware.rb:12:in `call'
> lib/middleware/anonymous_cache.rb:353:in `call'
> config/initializers/008-rack-cors.rb:25:in `call'
> config/initializers/100-quiet_logger.rb:23:in `call'
> config/initializers/100-silence_logger.rb:31:in `call'
> lib/middleware/enforce_hostname.rb:23:in `call'
> lib/middleware/request_tracker.rb:177:in `call'
> 
> ```

> **BACKTRACE**
>
> ```
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_type.rb:235:in `initialize'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_type.rb:143:in `new'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_type.rb:143:in `lookup'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_negotiation.rb:23:in `block in content_mime_type'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch_header'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_negotiation.rb:21:in `content_mime_type'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/request.rb:263:in `media_type'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/request.rb:348:in `form_data?'
> 
> rack (2.2.3) lib/rack/request.rb:445:in `POST'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/request.rb:390:in `block (2 levels) in POST'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/parameters.rb:106:in `parse_formatted_parameters'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/request.rb:389:in `block in POST'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch_header'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/request.rb:388:in `POST'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/parameters.rb:55:in `parameters'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_negotiation.rb:66:in `block in formats'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch'
> 
> rack (2.2.3) lib/rack/request.rb:69:in `fetch_header'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_negotiation.rb:64:in `formats'
> 
> actionpack (6.0.3.5) lib/action_dispatch/http/mime_negotiation.rb:60:in `format'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/route.rb:168:in `block in matches?'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/route.rb:165:in `each'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/route.rb:165:in `all?'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/route.rb:165:in `matches?'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/router.rb:148:in `block in match_routes'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/router.rb:148:in `select'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/router.rb:148:in `match_routes'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/router.rb:116:in `find_routes'
> 
> actionpack (6.0.3.5) lib/action_dispatch/journey/router.rb:32:in `serve'
> 
> actionpack (6.0.3.5) lib/action_dispatch/routing/route_set.rb:834:in `call'
> 
> lib/middleware/omniauth_bypass_middleware.rb:71:in `call'
> 
> rack (2.2.3) lib/rack/tempfile_reaper.rb:15:in `call'
> 
> rack (2.2.3) lib/rack/conditional_get.rb:27:in `call'
> 
> rack (2.2.3) lib/rack/head.rb:12:in `call'
> 
> lib/content_security_policy/middleware.rb:12:in `call'
> 
> lib/middleware/anonymous_cache.rb:353:in `call'
> 
> config/initializers/008-rack-cors.rb:25:in `call'
> 
> rack (2.2.3) lib/rack/session/abstract/id.rb:266:in `context'
> 
> rack (2.2.3) lib/rack/session/abstract/id.rb:260:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/cookies.rb:648:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/callbacks.rb:27:in `block in call'
> 
> activesupport (6.0.3.5) lib/active_support/callbacks.rb:101:in `run_callbacks'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/callbacks.rb:26:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/actionable_exceptions.rb:18:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/debug_exceptions.rb:32:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/show_exceptions.rb:33:in `call'
> 
> logster (2.9.6) lib/logster/middleware/reporter.rb:43:in `call'
> 
> railties (6.0.3.5) lib/rails/rack/logger.rb:37:in `call_app'
> 
> railties (6.0.3.5) lib/rails/rack/logger.rb:28:in `call'
> 
> config/initializers/100-quiet_logger.rb:23:in `call'
> 
> config/initializers/100-silence_logger.rb:31:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/remote_ip.rb:81:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/request_id.rb:27:in `call'
> 
> lib/middleware/enforce_hostname.rb:23:in `call'
> 
> rack (2.2.3) lib/rack/method_override.rb:24:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/executor.rb:14:in `call'
> 
> rack (2.2.3) lib/rack/sendfile.rb:110:in `call'
> 
> actionpack (6.0.3.5) lib/action_dispatch/middleware/host_authorization.rb:76:in `call'
> 
> rack-mini-profiler (2.3.1) lib/mini_profiler/profiler.rb:248:in `call'
> 
> message_bus (3.3.4) lib/message_bus/rack/middleware.rb:61:in `call'
> 
> lib/middleware/request_tracker.rb:177:in `call'
> 
> railties (6.0.3.5) lib/rails/engine.rb:527:in `call'
> 
> railties (6.0.3.5) lib/rails/railtie.rb:190:in `public_send'
> 
> railties (6.0.3.5) lib/rails/railtie.rb:190:in `method_missing'
> 
> rack (2.2.3) lib/rack/urlmap.rb:74:in `block in call'
> 
> rack (2.2.3) lib/rack/urlmap.rb:58:in `each'
> 
> rack (2.2.3) lib/rack/urlmap.rb:58:in `call'
> 
> unicorn (6.0.0) lib/unicorn/http_server.rb:634:in `process_client'
> 
> unicorn (6.0.0) lib/unicorn/http_server.rb:732:in `worker_loop'
> 
> unicorn (6.0.0) lib/unicorn/http_server.rb:547:in `spawn_missing_workers'
> 
> unicorn (6.0.0) lib/unicorn/http_server.rb:143:in `start'
> 
> unicorn (6.0.0) bin/unicorn:128:in `<top (required)>'
> 
> vendor/bundle/ruby/2.7.0/bin/unicorn:23:in `load'
> 
> vendor/bundle/ruby/2.7.0/bin/unicorn:23:in `<main>'
> 
> ```

---

<div class="post-metadata">

**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\
**Post date:** [2021年四月1日 11:46 UTC](https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087/2 "2021-04-01T11:46:11Z")

</div>

是的，这很可能是一个行为不当的机器人正在尝试各种注入技术。

我刚刚检查了我们内部的实例，发现 `/logs/settings` 中已将 `/^Mime::Type::InvalidMimeType/` 添加为忽略模式。这很可能是 #pr-welcome 问题，如果有人愿意尝试从源头阻止此类日志的话。

---

<div class="post-metadata">

**Author:** ![Nick\_Tomlinson](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nick_tomlinson/32/282728_2.png) [@Nick\_Tomlinson](https://meta.discourse.org/u/Nick_Tomlinson)\
**Post date:** [2021年四月12日 18:37 UTC](https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087/3 "2021-04-12T18:37:29Z")

</div>

我也收到了这个日志。

---

<div class="post-metadata">

**Author:** ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)\
**Post date:** [2022年十二月10日 16:50 UTC](https://meta.discourse.org/t/mime-invalidmimetype-is-this-a-hacking-attack/185087/4 "2022-12-10T16:50:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.