Reject referers that do not include an absolute path

[rails.git] / config / routes.rb

diff --git a/config/routes.rb b/config/routes.rb
index 5f904f06e462051b2a75a32bc5db276d4f23d707..97cedd9652b9e6f54a100e37f1037011f5b430b3 100644 (file)
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -171,7 +171,7 @@ OpenStreetMap::Application.routes.draw do
   # omniauth
   get "/auth/failure" => "users#auth_failure"
   match "/auth/:provider/callback" => "users#auth_success", :via => [:get, :post], :as => :auth_success
   # omniauth
   get "/auth/failure" => "users#auth_failure"
   match "/auth/:provider/callback" => "users#auth_success", :via => [:get, :post], :as => :auth_success

-  match "/auth/:provider" => "users#auth", :via => [:get, :post], :as => :auth
+  post "/auth/:provider" => "users#auth", :as => :auth

 
   # permalink
   get "/go/:code" => "site#permalink", :code => /[a-zA-Z0-9_@~]+[=-]*/, :as => :permalink
 
   # permalink
   get "/go/:code" => "site#permalink", :code => /[a-zA-Z0-9_@~]+[=-]*/, :as => :permalink