summaryrefslogtreecommitdiff
path: root/chef-server-webui
diff options
context:
space:
mode:
authortylercloke <tyler@opscode.com>2012-08-13 14:55:46 -0700
committertylercloke <tyler@opscode.com>2012-08-13 14:56:50 -0700
commit584a4cf64274f1e85e9dd1cc79dc8883fec0d0ed (patch)
tree01eb33d160a1462ebcef27067822f0cba2f2e0e0 /chef-server-webui
parentaebc393b1de0bdbcbbf23c0bda88927afcb0db3e (diff)
downloadchef-584a4cf64274f1e85e9dd1cc79dc8883fec0d0ed.tar.gz
Fixed a security bug where environments were not being cleared when attempted login occurred using improper credentials.
Diffstat (limited to 'chef-server-webui')
-rw-r--r--chef-server-webui/app/controllers/users_controller.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/chef-server-webui/app/controllers/users_controller.rb b/chef-server-webui/app/controllers/users_controller.rb
index 1936f4bf84..8d6d7a84fc 100644
--- a/chef-server-webui/app/controllers/users_controller.rb
+++ b/chef-server-webui/app/controllers/users_controller.rb
@@ -127,6 +127,7 @@ class UsersController < ApplicationController
Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
@user = Chef::WebUIUser.new
flash[:error] = "Could not complete logging in."
+ @environments = []
render :login
end
end