Protect DownloadZipServlet with an AccessRestrictionFilter.

James Moger

2011-09-26 78753bc22f140f863aa3fe56b1c59699ca3e2fa8

 src/com/gitblit/AccessRestrictionFilter.java

@@ -138,7 +138,7 @@
      }

      String fullUrl = url + (StringUtils.isEmpty(params) ? "" : ("?" + params));



      String repository = extractRepositoryName(url);

      String repository = extractRepositoryName(fullUrl);



      // Determine if the request URL is restricted

      String fullSuffix = fullUrl.substring(repository.length());