codeninjasllc/discourse
1
0
Fork 0
mirror of https://github.com/codeninjasllc/discourse.git synced 2025-03-14 00:50:14 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security: when login is required don't return the site node in the preload store

Browse source
This commit is contained in:
Sam 2013-10-15 09:50:30 +11:00
parent 634e764707
commit cf08d2c751
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
app/models/site.rb
View file

@ -55,6 +55,11 @@ class Site
end
def self.cached_json(guardian)
if guardian.anonymous? && SiteSetting.login_required
return {}.to_json
end
# Sam: bumping this way down, SiteSerializer will serialize post actions as well,
# On my local this was not being flushed as post actions types changed, it turn this
# broke local.