diff options
author | Heiko Bernloehr <Heiko.Bernloehr@FreeIT.de> | 2012-11-14 22:49:41 +0100 |
---|---|---|
committer | Heiko Bernloehr <Heiko.Bernloehr@FreeIT.de> | 2012-11-14 23:08:26 +0100 |
commit | 9298117acdf82c9529a12a3ab41baf9d1e86c2f4 (patch) | |
tree | 0bbd1e0513c8e8a57cb841ae83e3e99b7e874e86 /db | |
parent | c07fcb616e0db81472889488189dc2f440020ef6 (diff) | |
download | ecs2-9298117acdf82c9529a12a3ab41baf9d1e86c2f4.tar.gz ecs2-9298117acdf82c9529a12a3ab41baf9d1e86c2f4.zip |
Introduced security fix for redirects.
Now redirects are integrity secured by sha1 message digest.
A redirecting participant uses the /sys/auths resource realm
attribute to store a message digest over all relevant
redirect parameters (for details see [1]). The target
participant uses this message digest again and verifies the
integrity of the received redirect parameters
(Location-Header).
[1] see ECSA documentation at ECS->System resources->Auths
Diffstat (limited to 'db')
-rw-r--r-- | db/migrate/20100922104919_rename_touch_from_ressource_monitors.rb | 27 |
1 files changed, 0 insertions, 27 deletions
diff --git a/db/migrate/20100922104919_rename_touch_from_ressource_monitors.rb b/db/migrate/20100922104919_rename_touch_from_ressource_monitors.rb deleted file mode 100644 index 829eea7..0000000 --- a/db/migrate/20100922104919_rename_touch_from_ressource_monitors.rb +++ /dev/null @@ -1,27 +0,0 @@ -# Copyright (C) 2007, 2008, 2009, 2010 Heiko Bernloehr (FreeIT.de). -# -# This file is part of ECS. -# -# ECS is free software: you can redistribute it and/or modify it -# under the terms of the GNU Affero General Public License as -# published by the Free Software Foundation, either version 3 of -# the License, or (at your option) any later version. -# -# ECS is distributed in the hope that it will be useful, but -# WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU -# Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public -# License along with ECS. If not, see <http://www.gnu.org/licenses/>. - - -class RenameTouchFromRessourceMonitors < ActiveRecord::Migration - def self.up - rename_column :ressource_monitors, :touch, :monitor_counter - end - - def self.down - raise ActiveRecord::IrreversibleMigration - end -end |