Merge branch 'bzr/golem' of /Users/distler/Sites/code/instiki

parasew · May 29, 2014 · 558e167 · 558e167
2 parents 970c0d2 + b12d229
commit 558e167
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -255,6 +255,11 @@ def authorized?
     cookies.signed[CGI.escape(@web_name)] == @web.password or
     password_check(params['password']) or
     (@web.published? and action_name == 's5')
+
+    rescue ActiveSupport::MessageVerifier::InvalidSignature
+      flash[:info] = 'Bad cookie. Please reauthenticate.'
+      cookies.signed[CGI.escape(@web_name)] = ''
+      return false
   end
 
   def is_post