Force openid callbacks to use GET to avoid CSRF validation issues

[rails.git] / app / controllers / old_relation_controller.rb

diff --git a/app/controllers/old_relation_controller.rb b/app/controllers/old_relation_controller.rb
index f8ebbd070be3609901aeed5c7cc0cf60dc441763..19b4e5d3490db60cd2a825242e1f38930648cd8a 100644 (file)
--- a/app/controllers/old_relation_controller.rb
+++ b/app/controllers/old_relation_controller.rb
@@ -1,41 +1,32 @@
 class OldRelationController < ApplicationController
   require 'xml/libxml'
 
 class OldRelationController < ApplicationController
   require 'xml/libxml'
 

-  session :off
+  skip_before_filter :verify_authenticity_token

   before_filter :check_api_readable
   after_filter :compress_output
   before_filter :check_api_readable
   after_filter :compress_output

+  around_filter :api_call_handle_error, :api_call_timeout

 
   def history
 
   def history

-    begin
-      relation = Relation.find(params[:id])
-      doc = OSM::API.new.get_xml_doc
-
-      relation.old_relations.each do |old_relation|
-        doc.root << old_relation.to_xml_node
-      end
-
-      render :text => doc.to_s, :content_type => "text/xml"
-    rescue ActiveRecord::RecordNotFound
-      render :nothing => true, :status => :not_found
-    rescue
-      render :nothing => true, :status => :internal_server_error
+    relation = Relation.find(params[:id])
+    doc = OSM::API.new.get_xml_doc
+    
+    relation.old_relations.each do |old_relation|
+      doc.root << old_relation.to_xml_node

     end
     end

+    
+    render :text => doc.to_s, :content_type => "text/xml"

   end
   
   def version
   end
   
   def version

-    begin
-      old_relation = OldRelation.find(:first, :conditions => {:id => params[:id], :version => params[:version]} )
-      
-      response.headers['Last-Modified'] = old_relation.timestamp.rfc822
+    if old_relation = OldRelation.where(:relation_id => params[:id], :version => params[:version]).first
+      response.last_modified = old_relation.timestamp

 
       doc = OSM::API.new.get_xml_doc
       doc.root << old_relation.to_xml_node
 
       render :text => doc.to_s, :content_type => "text/xml"
 
       doc = OSM::API.new.get_xml_doc
       doc.root << old_relation.to_xml_node
 
       render :text => doc.to_s, :content_type => "text/xml"

-    rescue ActiveRecord::RecordNotFound
+    else

       render :nothing => true, :status => :not_found
       render :nothing => true, :status => :not_found

-    rescue
-      render :nothing => true, :status => :internetal_service_error

     end
   end
 end
     end
   end
 end