On Tue, 2012-12-04 at 14:23 +0200, [email protected] wrote:
> From: marios <[email protected]>
> 
> 
> Signed-off-by: marios <[email protected]>
> ---
>  server/lib/cimi/collections/addresses.rb         |  2 +-
>  server/lib/cimi/collections/credentials.rb       |  2 +-
>  server/lib/cimi/collections/machine_templates.rb |  2 +-
>  server/lib/cimi/collections/machines.rb          | 10 +++++-----
>  server/lib/cimi/collections/network_ports.rb     |  6 +++---
>  server/lib/cimi/collections/networks.rb          |  8 ++++----
>  6 files changed, 15 insertions(+), 15 deletions(-)

I think what grab_content_type is doing is overly lenient - we should
reject requests that have a content-type other than application/xml or
application/json with a 415. Note that the comparison of the
Content-Type header with the above two values must be case-insensitive.

David


Reply via email to