[freeside-commits] freeside/rt/lib/RT/Interface Web.pm,1.9,1.10

[Ivan,,,]

Update of /home/cvs/cvsroot/freeside/rt/lib/RT/Interface
In directory wavetail.420.am:/tmp/cvs-serv31529/lib/RT/Interface

Modified Files:
	Web.pm 
Log Message:
fix 403 errors pulling up RTx-Statistics charts, RT#13546

Index: Web.pm
===================================================================
RCS file: /home/cvs/cvsroot/freeside/rt/lib/RT/Interface/Web.pm,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -w -d -r1.9 -r1.10
--- Web.pm	20 Apr 2011 17:46:56 -0000	1.9
+++ Web.pm	15 Jul 2011 20:28:14 -0000	1.10
@@ -438,7 +438,11 @@
               autohandler | # requesting this directly is suspicious
               l           ) # loc component
             ( $ | / ) # trailing slash or end of path
-        }xi) {
+        }xi
+        && $path !~ m{ /RTx/Statistics/\w+/Elements/Chart }xi
+      )
+    {
+            warn "rejecting private component $path\n";
             $m->abort(403);
     }
 
@@ -2317,7 +2321,6 @@
     return ( _load_container_object( $obj_type, $obj_id ), $search_id );
 }
 
-package RT::Interface::Web;
 RT::Base->_ImportOverlays();
 
 1;