14196: Don't crash if element of params[:reader_tokens] is not a String
authorPeter Amstutz <pamstutz@veritasgenetics.com>
Tue, 2 Oct 2018 21:14:59 +0000 (17:14 -0400)
committerPeter Amstutz <pamstutz@veritasgenetics.com>
Tue, 2 Oct 2018 21:14:59 +0000 (17:14 -0400)
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <pamstutz@veritasgenetics.com>

services/api/app/controllers/application_controller.rb

index 8b20c0c1660b7fbb9cf01e5294105dd04189a8e6..a0555d13d762a495d9e30a57347ed3336f0e0984 100644 (file)
@@ -346,7 +346,7 @@ class ApplicationController < ActionController::Base
     if request.get? and params[:reader_tokens] and
       params[:reader_tokens].size < 100
       secrets = params[:reader_tokens].map { |t|
-        if t.starts_with? "v2/"
+        if t.is_a? String and t.starts_with? "v2/"
           t.split("/")[2]
         else
           t