From 2d63cc3768967c39d3facb0f7813180ce84b92c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Karel=20Pi=C4=8Dman?= Date: Fri, 6 Oct 2023 14:09:11 +0200 Subject: [PATCH] Security enhancement --- config/routes.rb | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/config/routes.rb b/config/routes.rb index 2c906b69..884d8316 100644 --- a/config/routes.rb +++ b/config/routes.rb @@ -186,10 +186,12 @@ if Redmine::Plugin.installed? 'redmine_dmsf' # WebDAV workaround for clients checking WebDAV availability in the root unless Redmine::Plugin.installed?('easy_extensions') - match '/', to: ->(env) { [405, {}, ["#{env['REQUEST_METHOD']} method is not allowed"]] }, + match '/', + to: ->(env) { [405, {}, ["#{env['REQUEST_METHOD']} method is not allowed"]] }, via: %i[propfind options] end - match '/dmsf', to: ->(env) { [405, {}, ["#{env['REQUEST_METHOD']} method is not allowed"]] }, + match '/dmsf', + to: ->(env) { [405, {}, ["#{env['REQUEST_METHOD']} method is not allowed"]] }, via: %i[propfind options] end end