summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Underwood <davefp@gmail.com>2013-07-31 16:05:42 -0700
committerDavid Underwood <davefp@gmail.com>2013-07-31 16:05:42 -0700
commite672d8423be2544cf5c9e801cb56adf44ee65e3b (patch)
tree2dfe05ede6a268ae0cc4dfe3b13f1b14bfed202d
parent60a3ddff2333a8fd518cbd190d5de254e6471cf6 (diff)
parent06ba2ea902bfd73a9c9437e7f44063b21611edb7 (diff)
Merge pull request #174 from drubin/auth-for-index
Security: authenticate / route as to not leak private dashboard urls
-rw-r--r--lib/dashing.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/dashing.rb b/lib/dashing.rb
index 935a031..f5b60ca 100644
--- a/lib/dashing.rb
+++ b/lib/dashing.rb
@@ -56,6 +56,7 @@ get '/events', provides: 'text/event-stream' do
end
get '/' do
+ protected!
begin
redirect "/" + (settings.default_dashboard || first_dashboard).to_s
rescue NoMethodError => e