Merge pull request #174 from drubin/auth-for-index

Security: authenticate / route as to not leak private dashboard urls
Shopify · Jul 31, 2013 · e672d84 · e672d84
2 parents 60a3ddf + 06ba2ea
commit e672d84
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/dashing.rb b/lib/dashing.rb
@@ -56,6 +56,7 @@ def protected!
 end
 
 get '/' do
+  protected!
   begin
   redirect "/" + (settings.default_dashboard || first_dashboard).to_s
   rescue NoMethodError => e