Patched issue #8 - _restrict now deny external calls from accessing t…

…he parent state of restricted descendants
bemson · May 1, 2011 · 4648844 · 4648844
1 parent 7104719
commit 4648844
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/flow.js b/src/flow.js
@@ -1,5 +1,5 @@
 /*
- * Flow v0.2.2
+ * Flow v0.2.2.1
  * http://github.com/bemson/Flow/
  *
  * Copyright 2011, Bemi Faison
@@ -1028,7 +1028,7 @@
 	sys.objects.Node.prototype = {
 		allowTgt: function (tgt) {
 			var node = this;
-			return node.flow.exec || !node.restrict || !tgt.path.indexOf(node.restrict);
+			return node.flow.exec || !node.restrict || (tgt.path.length > node.restrict.length && !tgt.path.indexOf(node.restrict));
 		},
 		// add single variable - supports cfg can be a string or object
 		addVarDef: function (cfg) {