Disallow POST to compare: does not create objects

2014-10-07 20:48:26 +02:00 · 2014-10-07 20:48:26 +02:00 · 6d4076fdc6
parent bbc52b0000
commit 6d4076fdc6
1 changed files with 2 additions and 1 deletions
--- a/config/routes.rb
+++ b/config/routes.rb
@ -212,7 +212,8 @@ Gitlab::Application.routes.draw do
        end
      end

-      match "/compare/:from...:to" => "compare#show", as: "compare", via: [:get, :post], constraints: {from: /.+/, to: /.+/}
+      get '/compare/:from...:to' => 'compare#show', :as => 'compare',
+          :constraints => {from: /.+/, to: /.+/}

        resources :snippets, constraints: {id: /\d+/} do
          member do