only allow sessionStorage and localStorage

2012-12-06 14:44:00 +01:00 · 2012-12-06 14:44:00 +01:00 · f6c983978f
commit f6c983978f
parent 3eb4c04f11
1 changed files with 1 additions and 1 deletions
--- a/lib/travis/web/set_token.rb
+++ b/lib/travis/web/set_token.rb
@ -20,7 +20,7 @@ module Travis
        request = Rack::Request.new(env)
        token, user, storage = request.params.values_at('token', 'user', 'storage')
        if token =~ /\A[a-zA-Z\-_\d]+\Z/
-          storage = 'sessionStorage' if storage.to_s.empty?
+          storage = 'sessionStorage' if storage != 'localStorage'
          [storage, token, user, request.fullpath]
        end
      end