Lockdown: Release 0.5.20

Fixed to authorized? method and new options[:session_timeout_method].
Added by Andrew Stone 107 days ago

This release addressed issues with the authorized? method used in the security engine. The ActionController::Routing::Routes.recognize_path(path) would return unexpected values.

For example:
ActionController::Routing::Routes.recognize_path("/users/1/edit") => {:action=>"1", :controller=>"users", :id=>"edit"}

Notice the :action and :id swap.

Also added a new option :session_timeout_method. When the session times out, Lockdown will call this method.

This release DOES affect the Lockdown security engine


Comments