Lockdown write access to custom.css and js

2018-10-02 23:56:46 +02:00
parent 6d4f97fdc4
commit f8673f565a
2 changed files with 23 additions and 20 deletions
@@ -144,7 +144,11 @@ module Precious
      end
    end

-    get %r{\/edit\/custom.(js|css)} do
+    get %r{\/(edit|create)\/custom.(js|css)} do
+      forbid
+    end
+
+    post %r{\/(deleteFile|rename|edit|revert|create)\/custom.(js|css)(\/.*)?} do
      forbid
    end

@@ -216,10 +220,6 @@ module Precious
      end
    end

-    post %r{\/(deleteFile|rename|edit|revert)\/custom.(js|css)} do
-      forbid
-    end
-
    post '/deleteFile/*' do
      forbid unless @allow_editing
      wiki = wiki_new