1 new commit in galaxy-central:
https://bitbucket.org/galaxy/galaxy-central/changeset/dc749983abdf/
changeset: dc749983abdf
user: dannon
date: 2012-09-17 18:27:03
summary: Prevent galaxy session cookie from being accessed via script. We don't use it via js anywhere, only other cookies specifically set for dynatree/genetrack.
affected #: 1 file
diff -r 38015598badbfe47112bda3d6894a5a2c9bc9200 -r dc749983abdf243d6ff9a8295d917a2cec475771 lib/galaxy/web/framework/__init__.py
--- a/lib/galaxy/web/framework/__init__.py
+++ b/lib/galaxy/web/framework/__init__.py
@@ -347,6 +347,7 @@
tstamp = time.localtime ( time.time() + 3600 * 24 * age )
self.response.cookies[name]['expires'] = time.strftime( '%a, %d-%b-%Y %H:%M:%S GMT', tstamp )
self.response.cookies[name]['version'] = version
+ self.response.cookies[name]['httponly'] = True
def _ensure_valid_session( self, session_cookie, create=True):
"""
Ensure that a valid Galaxy session exists and is available as
Repository URL: https://bitbucket.org/galaxy/galaxy-central/
--
This is a commit notification from bitbucket.org. You are receiving
this because you have the service enabled, addressing the recipient of
this email.
1 new commit in galaxy-central:
https://bitbucket.org/galaxy/galaxy-central/changeset/be38ea1ed213/
changeset: be38ea1ed213
user: dan
date: 2012-09-14 20:50:27
summary: Fix for unit tests in galaxy.tools.deps
affected #: 1 file
diff -r f8ea04e7bbff4acbc14f95e14fd6f955c307f906 -r be38ea1ed21376549a244cf29bb6d1b0bd73059f lib/galaxy/tools/deps/__init__.py
--- a/lib/galaxy/tools/deps/__init__.py
+++ b/lib/galaxy/tools/deps/__init__.py
@@ -73,13 +73,14 @@
else:
return None, None, None
def _get_installed_dependency( self, installed_tool_dependencies, name, type, version=None ):
- for installed_tool_dependency in installed_tool_dependencies:
- if version:
- if installed_tool_dependency.name==name and installed_tool_dependency.type==type and installed_tool_dependency.version==version:
- return installed_tool_dependency
- else:
- if installed_tool_dependency.name==name and installed_tool_dependency.type==type:
- return installed_tool_dependency
+ if installed_tool_dependencies:
+ for installed_tool_dependency in installed_tool_dependencies:
+ if version:
+ if installed_tool_dependency.name==name and installed_tool_dependency.type==type and installed_tool_dependency.version==version:
+ return installed_tool_dependency
+ else:
+ if installed_tool_dependency.name==name and installed_tool_dependency.type==type:
+ return installed_tool_dependency
return None
def _get_package_installed_dependency_path( self, installed_tool_dependency, base_path, name, version ):
tool_shed_repository = installed_tool_dependency.tool_shed_repository
Repository URL: https://bitbucket.org/galaxy/galaxy-central/
--
This is a commit notification from bitbucket.org. You are receiving
this because you have the service enabled, addressing the recipient of
this email.