@@ -3,3 +3,4 @@ nbproject/** pkg/** doc/** +email.txt .gitignore @@ -1,3 +1,6 @@ +== 0.5.9 2008-06-19 +* Fixed: Added url.strip! to account for spaces. URI::split(url) was bombing if url contained spaces. + == 0.5.8 2008-06-17 * Fixed: External links are no longer restricted by link_to security. * Modified: Name of migration that adds admin user. History.txt @@ -160,8 +160,12 @@ module Lockdown end def authorized?(url) + return false unless url + return true if current_user_is_admin? + url.strip! + url_parts = URI::split(url) path = url_parts[5] lib/lockdown/controller.rb @@ -2,7 +2,7 @@ module Lockdown #:nodoc: module VERSION #:nodoc: MAJOR = 0 MINOR = 5 - TINY = 8 + TINY = 9 STRING = [MAJOR, MINOR, TINY].join('.') end lib/lockdown/version.rb 8f18eed40200ab17d1f963740fe7da92838399de Andrew Stone andy@stonean.com http://github.com/stonean/lockdown/commit/c73c785097e0c3865a5a96c3d7b9dd3b2c7581da c73c785097e0c3865a5a96c3d7b9dd3b2c7581da 2008-06-19T09:03:13-07:00 2008-06-19T09:03:13-07:00 Added url.strip! to account for spaces. URI::split(url) was bombing if url contained spaces. 76c2fe82a46ab7dd4338a32e0e617711e601623e Andrew Stone andy@stonean.com