suzanne.soy/travis-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

only allow sessionStorage and localStorage

Browse Source
This commit is contained in:
Konstantin Haase 2012-12-06 14:44:00 +01:00
parent 3eb4c04f11
commit f6c983978f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/travis/web/set_token.rb
View File

@ -20,7 +20,7 @@ module Travis
request = Rack::Request.new(env) request = Rack::Request.new(env)
token, user, storage = request.params.values_at('token', 'user', 'storage') token, user, storage = request.params.values_at('token', 'user', 'storage')
if token =~ /\A[a-zA-Z\-_\d]+\Z/ if token =~ /\A[a-zA-Z\-_\d]+\Z/
storage = 'sessionStorage' if storage.to_s.empty? storage = 'sessionStorage' if storage != 'localStorage'
[storage, token, user, request.fullpath] [storage, token, user, request.fullpath]
end end
end end