marty 0.5.19 → 0.5.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7b041dfaff63f5f2a9252330f8a9899b0f1323ed
-  data.tar.gz: 7dcea16c26b2f970166fa238570d25237120cc29
+  metadata.gz: fadde1bf5efa6fe544f3ff25c1304fe13d5d5b86
+  data.tar.gz: 5f682bdabf50f7e920e8c9c333752502da263623
 SHA512:
-  metadata.gz: 19f4a3eac575745e9f84f45d2816b9a915553e335bfb132f8061e6a2d5e40828ab86b1a7f3511f39919e8f57a860a2f89565018a267be5b571f98065cbe1db56
-  data.tar.gz: baf2d7634667b9a634410102c6b96698bbf1d9165a0015e40f299847f9d7adde9c56f4cb2ed4d5d4c2d132ec02d1b8cc8f2823fd4fa0ebc1b2c2c4f157848ca2
+  metadata.gz: 196acdb333b359b87808de78b7ef4a989b006ae032d57c272ea53f9bc304dcd98421d91f3b4b6bf105632868e2c9cc627bdef65006b4e1f711ba444f46f262ce
+  data.tar.gz: e1603b431d2f8ae6d2fea170b771c09359a9d9d153786c67c855f9ecfe19dbcfa9129727b238c9c11a2467e4b46d0952001e55bca3c49c6065c64545ab34864e

data/app/components/marty/report_form.rb

@@ -52,7 +52,7 @@ class Marty::ReportForm < Marty::Form
   def self.run_eval(params)
     engine, d_params, node = get_report_engine(params)
 
-    raise "no engine" unless engine # insufficient permissions
+    raise "Insufficient permissions" unless engine
     raise "no selected report node" unless String === node
 
     begin
@@ -112,6 +112,13 @@ class Marty::ReportForm < Marty::Form
        form.setAttribute("method", "post");
        form.setAttribute("action", "#{@@mount_path}/report."+this.repformat);
 
+       // set authenticity token
+       var hiddenField = document.createElement("input");
+       hiddenField.setAttribute("type", "hidden");
+       hiddenField.setAttribute("name", "authenticity_token");
+       hiddenField.setAttribute("value", this.authenticityToken);
+       form.appendChild(hiddenField);
+
        for (var key in params) {
           if (params.hasOwnProperty(key)) {
              var hiddenField = document.createElement("input");
@@ -218,10 +225,11 @@ class Marty::ReportForm < Marty::Form
       }
     }
 
-    c.items     = items
-    c.repformat = format
-    c.title     = "Generate: #{title}-#{sset.tag.name}"
-    c.reptitle  = title
+    c.items              = items
+    c.repformat          = format
+    c.title              = "Generate: #{title}-#{sset.tag.name}"
+    c.reptitle           = title
+    c.authenticity_token = controller.send(:form_authenticity_token)
 
     actions[:foreground].disabled = !!background_only
   end

data/app/controllers/marty/report_controller.rb

@@ -1,4 +1,4 @@
-class Marty::ReportController < ActionController::Base
+class Marty::ReportController < Marty::ApplicationController
   def index
     format, req_disposition, title =
       params[:format], params[:disposition], params[:reptitle]

data/lib/marty/version.rb

@@ -1,3 +1,3 @@
 module Marty
-  VERSION = "0.5.19"
+  VERSION = "0.5.20"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: marty
 version: !ruby/object:Gem::Version
-  version: 0.5.19
+  version: 0.5.20
 platform: ruby
 authors:
 - Arman Bostani
@@ -12,7 +12,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-12-07 00:00:00.000000000 Z
+date: 2015-12-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pg