mongrel_secure_download-redux 0.0.1.198 → 0.0.2.199

data/README

@@ -2,7 +2,7 @@
 
 == VERSION
 
-This documentation refers to mongrel_secure_download-redux version 0.0.1
+This documentation refers to mongrel_secure_download-redux version 0.0.2
 
 
 == DESCRIPTION

data/Rakefile

@@ -7,7 +7,7 @@ begin
     },
 
     :gem => {
-      :version      => '0.0.1',
+      :version      => '0.0.2',
       :summary      => 'Re-implementation of the Mongrel Secure Download Plugin',
       :files        => FileList['lib/**/*.rb'].to_a,
       :extra_files  => FileList['[A-Z]*', 'resources/*'].to_a,

data/lib/mongrel_secure_download-redux/init.rb

@@ -12,14 +12,14 @@ class SecureDownloadRedux < GemPlugin::Plugin '/handlers'
 
   URL_RE = %r{\A(?:ht|f)tps?://}io
 
-  attr_reader :response, :secret, :prefix, :path, :timestamp, :token
+  attr_reader :response, :secret, :base, :path, :timestamp, :token
 
   def process(request, response)
     query = Mongrel::HttpRequest.query_parse(request.params['QUERY_STRING'])
 
     @response  = response
     @secret    = @options[:secret]
-    @prefix    = @options[:prefix] || '.'
+    @base      = @options[:base] || '.'
     @path      = query['path']
     @timestamp = query['timestamp']
     @token     = query['token']
@@ -81,10 +81,10 @@ class SecureDownloadRedux < GemPlugin::Plugin '/handlers'
   alias_method :send_url, :send_url_redirect2
 
   def send_file
-    path = File.expand_path(File.join(prefix, @path))
+    path = File.expand_path(File.join(base, @path))
 
     # Prevent double-dot vulnerability!
-    return unless path =~ %r{\A#{Regexp.escape(File.expand_path(prefix))}}
+    return unless path =~ %r{\A#{Regexp.escape(File.expand_path(base))}}
 
     file = File.stat(path)
     size = file.size

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: mongrel_secure_download-redux
 version: !ruby/object:Gem::Version 
-  version: 0.0.1.198
+  version: 0.0.2.199
 platform: ruby
 authors: 
 - Jens Wille
@@ -42,22 +42,22 @@ extra_rdoc_files:
 files: 
 - lib/mongrel_secure_download-redux/init.rb
 - COPYING
-- README
 - Rakefile
+- README
 - resources/defaults.yaml
 has_rdoc: true
 homepage: http://prometheus.rubyforge.org/mongrel_secure_download-redux
 post_install_message: 
 rdoc_options: 
-- --title
-- mongrel_secure_download-redux Application documentation
+- --all
 - --main
 - README
 - --line-numbers
-- --all
 - --inline-source
 - --charset
 - UTF-8
+- --title
+- mongrel_secure_download-redux Application documentation
 require_paths: 
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement