jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #3239 from evazion/fix-md5-leaks

Browse Source 
Fix censored post exposures in data attributes / legacy API (#3237)
This commit is contained in:
Albert Yi
2017-07-26 17:09:18 -07:00
committed by GitHub
parent b4cba9c8d9 67528ce5ab
commit 05a25a6baf
5 changed files with 28 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/views/legacy/posts.json.erb
View File

@@ -1 +0,0 @@
[<%= @posts.map {|x| x.to_legacy_json}.join(", ").html_safe %>]

6
app/views/legacy/posts.xml.erb
View File

@@ -1,6 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<posts>
<% @posts.each do |post| %>
<post preview_url="<%= post.preview_file_url %>" file_size="<%= post.file_size %>" status="<%= post.status %>" score="<%= post.score %>" file_url="<%= post.file_url %>" height="<%= post.image_height %>" has_comments="<%= post.last_commented_at.present? %>" tags="<%= post.tag_string %>" source="<%= post.source %>" parent_id="<%= post.parent_id %>" created_at="<%= post.created_at.to_formatted_s(:db) %>" rating="<%= post.rating %>" has_notes="<%= post.last_noted_at.present? %>" id="<%= post.id %>" md5="<%= post.md5 %>" has_children="<%= post.has_children? %>" creator_id="<%= post.uploader_id %>" author="<%= post.uploader_name %>" width="<%= post.image_width %>"/>
<% end %>
</posts>