[ARVADOS] updated: 3a8ef07d64112657ce8a8ee5fad39368b8a35c74

[git at public.curoverse.com]

Summary of changes:
 apps/workbench/app/controllers/application_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

       via  3a8ef07d64112657ce8a8ee5fad39368b8a35c74 (commit)
      from  62f9bb4bb85fc644e2b005b6f953b642b832b21c (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 3a8ef07d64112657ce8a8ee5fad39368b8a35c74
Author: Brett Smith <brett at curoverse.com>
Date:   Fri Jun 20 16:24:54 2014 -0400

    2891: Improve api_token parameter removal.

diff --git a/apps/workbench/app/controllers/application_controller.rb b/apps/workbench/app/controllers/application_controller.rb
index 07edc36..af1d73f 100644
--- a/apps/workbench/app/controllers/application_controller.rb
+++ b/apps/workbench/app/controllers/application_controller.rb
@@ -305,7 +305,7 @@ class ApplicationController < ActionController::Base
   protected
 
   def strip_token_from_path(path)
-    path.sub(/([&\?])api_token=[^&]*/, '\1')
+    path.sub(/([\?&;])api_token=[^&;]*[&;]?/, '\1')
   end
 
   def redirect_to_login

-----------------------------------------------------------------------


hooks/post-receive
--