[obs-commits] [openSUSE/open-build-service] 795637: [webui] move finding the request into a before_fil...

Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 795637804f337094c7faf41ab3ff094170366bb0 https://github.com/openSUSE/open-build-service/commit/795637804f337094c7faf4... Author: Stephan Kulow Date: 2014-01-09 (Thu, 09 Jan 2014) Changed paths: M src/api/app/controllers/webui/request_controller.rb Log Message: ----------- [webui] move finding the request into a before_filter (to please code complexity check) Commit: 5f28f92de478e35db6071ad785a80c9d2b7a1c02 https://github.com/openSUSE/open-build-service/commit/5f28f92de478e35db6071a... Author: Stephan Kulow Date: 2014-01-09 (Thu, 09 Jan 2014) Changed paths: M src/api/app/controllers/source_controller.rb M src/api/test/functional/source_controller_test.rb Log Message: ----------- [api] forbid direct access to _project/_attribute?meta=1 This is the route the backend gets the API attributes from, but the user should not be able to write it directly Compare: https://github.com/openSUSE/open-build-service/compare/646fd6d58167...5f28f9...