Force openid callbacks to use GET to avoid CSRF validation issues

[rails.git] / app / controllers / old_relation_controller.rb

diff --git a/app/controllers/old_relation_controller.rb b/app/controllers/old_relation_controller.rb
index 0e1950ceee6b2c83d54bcee2677e5b3c02abc42d..19b4e5d3490db60cd2a825242e1f38930648cd8a 100644 (file)
--- a/app/controllers/old_relation_controller.rb
+++ b/app/controllers/old_relation_controller.rb
@@ -1,6 +1,7 @@
 class OldRelationController < ApplicationController
   require 'xml/libxml'
 
+  skip_before_filter :verify_authenticity_token
   before_filter :check_api_readable
   after_filter :compress_output
   around_filter :api_call_handle_error, :api_call_timeout
@@ -17,7 +18,7 @@ class OldRelationController < ApplicationController
   end
   
   def version
-    if old_relation = OldRelation.where(:id => params[:id], :version => params[:version]).first
+    if old_relation = OldRelation.where(:relation_id => params[:id], :version => params[:version]).first
       response.last_modified = old_relation.timestamp
 
       doc = OSM::API.new.get_xml_doc