7/28 Recent Commits to alaveteli:master

2 views
Skip to first unread message

Feed My Inbox

unread,
Jul 28, 2011, 12:48:46 AM7/28/11
to alavetel...@googlegroups.com
     
    Recent Commits to alaveteli:master    
   
Don't treat CSRF tokens as optional session data for administrators (they're needed to allow them to edit anything! Fixes #95
July 27, 2011 at 3:27 PM
 
m app/controllers/admin_controller.rb
m spec/controllers/admin_public_body_controller_spec.rb
m spec/lib/whatdotheyknow/strip_empty_sessions_spec.rb
Don't treat CSRF tokens as optional session data for administrators (they're needed to allow them to edit anything! Fixes #95

(Also change wording of test namess to match usual rspec convention)
Media Files
assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png (PNG Image)
   
   
include "locale" in list of session data keys that are used to decide if a rails session cookie is redundant for the purposes of this request. Fixes #91
July 27, 2011 at 8:50 AM
 
m lib/whatdotheyknow/strip_empty_sessions.rb
m spec/lib/whatdotheyknow/strip_empty_sessions_spec.rb
include "locale" in list of session data keys that are used to decide if a rails session cookie is redundant for the purposes of this request.  Fixes #91
Media Files
assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png (PNG Image)
   
   
Authentication should only apply to admin interface when *both* email *and* password are unset
July 27, 2011 at 8:50 AM
 
m app/controllers/admin_controller.rb
m spec/controllers/admin_public_body_controller_spec.rb
Authentication should only apply to admin interface when *both* email *and* password are unset
Media Files
assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png (PNG Image)
   
     
 
This email was sent to alavetel...@googlegroups.com.
Delivered by Feed My Inbox
PO Box 682532 Franklin, TN 37068
Create Account
Unsubscribe Here Feed My Inbox
 
     
Reply all
Reply to author
Forward
0 new messages