cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix issues with bogus % encoded sequences in URLs

Browse source 
Add a URI sanitizer to the rack stack avoid rack throwing
exceptions on the server side, and ignore errors decoding
components on the client side.

Fixes #1101
This commit is contained in:
Tom Hughes 2015-12-07 13:52:20 +00:00
parent d218d5bf7d
commit e20bb507f1
4 changed files with 25 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Gemfile
View file

@ -54,6 +54,9 @@ gem "i18n-js", ">= 3.0.0.rc10"
gem "rack-cors"
gem "actionpack-page_caching"
# Sanitise URIs
gem "rack-uri_sanitizer"
# Omniauth for authentication
gem "omniauth"
gem "omniauth-openid"