Dont allow file edit for non-branches ref

Dmitriy Zaporozhets
1 parent 65197b8a
Showing 1 changed file with 2 additions and 0 deletions Show diff stats
app/helpers/tree_helper.rb
@@ -57,6 +57,8 @@ module TreeHelper
   end
  
   def allowed_tree_edit?
+    return false unless @repository.branch_names.include?(@ref)
+
     if @project.protected_branch? @ref
       can?(current_user, :push_code_to_protected_branches, @project)
     else
...	...	@@ -57,6 +57,8 @@ module TreeHelper
57	57	end
58	58
59	59	def allowed_tree_edit?
	60	+ return false unless @repository.branch_names.include?(@ref)
	61	+
60	62	if @project.protected_branch? @ref
61	63	can?(current_user, :push_code_to_protected_branches, @project)
62	64	else
...	...