IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

security: when login is required don't return the site node in the preload store

Browse Source
This commit is contained in:
Sam 2013-10-15 09:50:30 +11:00
parent 634e764707
commit cf08d2c751
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/models/site.rb
View File

@ -55,6 +55,11 @@ class Site
end end
def self.cached_json(guardian) def self.cached_json(guardian)
if guardian.anonymous? && SiteSetting.login_required
return {}.to_json
end
# Sam: bumping this way down, SiteSerializer will serialize post actions as well, # Sam: bumping this way down, SiteSerializer will serialize post actions as well,
# On my local this was not being flushed as post actions types changed, it turn this # On my local this was not being flushed as post actions types changed, it turn this
# broke local. # broke local.