ilyakooo0/urbit
1
0
Fork 0
mirror of https://github.com/ilyakooo0/urbit.git synced 2024-12-18 12:22:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Restrict authenticated requests to /~~ and /~/as paths

Browse Source
This commit is contained in:
Anton Dyudin 2015-05-06 15:58:54 -07:00
parent 99451fa4af
commit fb14b6717a
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
base/arvo/eyre.hoon
View File

@ -422,7 +422,7 @@
=. p.p.pul |(p.p.pul ?=(hoke r.p.pul))
=+ her=(host-to-ship r.p.pul)
?: |(?=(~ her) =(our u.her))
(handle pul q.+.kyz [p.heq maf s.heq])
(handle pul [q.+.kyz anon] [p.heq maf s.heq])
=+ han=(sham hen)
=. pox (~(put by pox) han hen)
(ames-gram u.her [%get ~] han +.kyz)
@ -671,7 +671,7 @@
::
++ handle
|= $: [hat=hart pok=pork quy=quay] :: purl, parsed url
cip=clip :: client ip
[cip=clip him=ship] :: client ip, ship
[mef=meth maf=math bod=(unit octs)] :: method/headers/body
==
=< apex
@ -930,8 +930,7 @@
%mess
:- %|
=^ orx ..ya ?:(is-anon new-view:for-client [(need grab-oryx) ..ya])
=+ vew=(ire-ix (oryx-to-ixor orx))
=+ [him=him.vew cay=[%json !>(`json`s.hem)]]
=+ [vew=(ire-ix (oryx-to-ixor orx)) cay=[%json !>(`json`s.hem)]]
?: ?=(%json q.hem) ((teba new-mess.vew) p.hem r.hem cay)
%+ pass-note [%to (oryx-to-ixor orx) (scot %p p.p.hem) q.p.hem r.hem]
(ford-req root-beak [%cast q.hem %done ~ cay])
@ -989,7 +988,7 @@
%get
~| aute/ham
?: |(=(anon him.ham) (~(has in aut.yac) him.ham))
process(pok rem.ham, ..ya abet.yac(him him.ham))
process(him him.ham, pok rem.ham)
?. =(our him.ham)
[%| ((teba foreign-auth.yac) him.ham hat rem.ham quy)]
(show-login-page ~)
@ -1028,7 +1027,7 @@
(new-ya (rsh 3 1 (scot %p (end 6 1 ney))))
~| bad-cookie/u.lig
=+ cyz=(~(got by wup) u.lig)
~(. ya u.lig cyz(cug ~))
~(. ya u.lig cyz(him him, cug ~))
::
++ new-ya |=(ses=hole ~(. ya ses (new-cyst ses)))
++ new-cyst