summaryrefslogtreecommitdiff
path: root/chef-server-webui
diff options
context:
space:
mode:
authortylercloke <tyler@opscode.com>2012-08-13 10:05:05 -0700
committertylercloke <tyler@opscode.com>2012-08-13 10:05:05 -0700
commit7a2c30b1ad2c520de0e91fbbaf7f174382511392 (patch)
tree72d7aa6cff099c2a6c75be19aa41b77dca1c810a /chef-server-webui
parent13a1250dc738b3dfaa1258c46e78d014692caa6e (diff)
downloadchef-7a2c30b1ad2c520de0e91fbbaf7f174382511392.tar.gz
Found and fixed security bug where environments were not being cleared on logout.
Diffstat (limited to 'chef-server-webui')
-rw-r--r--chef-server-webui/app/controllers/users.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/chef-server-webui/app/controllers/users.rb b/chef-server-webui/app/controllers/users.rb
index d3ee752937..72455a6a7e 100644
--- a/chef-server-webui/app/controllers/users.rb
+++ b/chef-server-webui/app/controllers/users.rb
@@ -133,6 +133,7 @@ class Users < Application
Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
@user = Chef::WebUIUser.new
@_message = { :error => "Could not complete logging in." }
+ @environments = []
render :login
end
end