From: John Benediktsson <mrjbq7@gmail.com>
Date: Sat, 15 Aug 2015 23:57:40 +0000 (-0700)
Subject: furnace.actions: return Method Not Allowed if not GET/HEAD/POST.
X-Git-Tag: unmaintained~2040
X-Git-Url: https://gitweb.factorcode.org/gitweb.cgi?p=factor.git;a=commitdiff_plain;h=2bb93f1b721f34acf8a9e9bb0c9ba412a8e2140f

furnace.actions: return Method Not Allowed if not GET/HEAD/POST.
---

diff --git a/basis/furnace/actions/actions.factor b/basis/furnace/actions/actions.factor
index e5720636ff..4d3a179942 100644
--- a/basis/furnace/actions/actions.factor
+++ b/basis/furnace/actions/actions.factor
@@ -96,6 +96,7 @@ M: action call-responder* ( path action -- response )
         { "GET" [ handle-get ] }
         { "HEAD" [ handle-get ] }
         { "POST" [ handle-post ] }
+        [ 2drop <405> ]
     } case ;
 
 M: action modify-form
diff --git a/basis/http/server/responses/responses.factor b/basis/http/server/responses/responses.factor
index 9bade222ff..4ab39ba557 100644
--- a/basis/http/server/responses/responses.factor
+++ b/basis/http/server/responses/responses.factor
@@ -36,11 +36,14 @@ IN: http.server.responses
 : <304> ( -- response )
     304 "Not modified" <trivial-response> ;
 
-: <403> ( -- response )
-    403 "Forbidden" <trivial-response> ;
-
 : <400> ( -- response )
     400 "Bad request" <trivial-response> ;
 
+: <403> ( -- response )
+    403 "Forbidden" <trivial-response> ;
+
 : <404> ( -- response )
     404 "Not found" <trivial-response> ;
+
+: <405> ( -- response )
+    405 "Method Not Allowed" <trivial-response> ;