add section for host header attack prevention in rails security guide (#43330)
add section for host header attack prevention in rails security guide (#43330)

* add section for host header attack prevention in rails security guide

* Fix wrong rails setting key for HostAuthorization middleware

The original documention was wrong, the rails configuration key is called host_authorization.

* add a short intro on how dns rebinding attacks work

* Apply suggestions from code review

Co-authored-by: Rafael Mendonça França <2d8d596a0b97569f9226a8c33ed9c6dbc8d88120@franca.dev>

Co-authored-by: Rafael Mendonça França <2d8d596a0b97569f9226a8c33ed9c6dbc8d88120@franca.dev>
yahonda/rails,Erol/rails,kmcphillips/rails,BlakeWilliams/rails,esparta/rails,BlakeWilliams/rails,esparta/rails,yahonda/rails,kmcphillips/rails,MSP-Greg/rails,kmcphillips/rails,rails/rails,MSP-Greg/rails,Erol/rails,MSP-Greg/rails,kmcphillips/rails,rails/rails,Erol/rails,yawboakye/rails,georgeclaghorn/rails,esparta/rails,georgeclaghorn/rails,yawboakye/rails,MSP-Greg/rails,rails/rails,georgeclaghorn/rails,Erol/rails,BlakeWilliams/rails,BlakeWilliams/rails,yawboakye/rails,yahonda/rails,rails/rails,georgeclaghorn/rails,yahonda/rails,yawboakye/rails,esparta/rails