diff options
author | David Underwood <davefp@gmail.com> | 2013-07-31 16:05:42 -0700 |
---|---|---|
committer | David Underwood <davefp@gmail.com> | 2013-07-31 16:05:42 -0700 |
commit | e672d8423be2544cf5c9e801cb56adf44ee65e3b (patch) | |
tree | 2dfe05ede6a268ae0cc4dfe3b13f1b14bfed202d | |
parent | 60a3ddff2333a8fd518cbd190d5de254e6471cf6 (diff) | |
parent | 06ba2ea902bfd73a9c9437e7f44063b21611edb7 (diff) |
Merge pull request #174 from drubin/auth-for-index
Security: authenticate / route as to not leak private dashboard urls
-rw-r--r-- | lib/dashing.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/dashing.rb b/lib/dashing.rb index 935a031..f5b60ca 100644 --- a/lib/dashing.rb +++ b/lib/dashing.rb @@ -56,6 +56,7 @@ get '/events', provides: 'text/event-stream' do end get '/' do + protected! begin redirect "/" + (settings.default_dashboard || first_dashboard).to_s rescue NoMethodError => e |