jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

upgrades: fix unsafe redirect errors in receipt/payment actions.

Browse Source
This commit is contained in:
evazion
2022-01-10 00:11:10 -06:00
parent 85e1ae3c9b
commit 323882dbc4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/user_upgrades_controller.rb
View File

@@ -41,12 +41,12 @@ class UserUpgradesController < ApplicationController
def receipt def receipt
@user_upgrade = authorize UserUpgrade.find(params[:id]) @user_upgrade = authorize UserUpgrade.find(params[:id])
redirect_to @user_upgrade.receipt_url redirect_to @user_upgrade.receipt_url, allow_other_host: true
end end
def payment def payment
@user_upgrade = authorize UserUpgrade.find(params[:id]) @user_upgrade = authorize UserUpgrade.find(params[:id])
redirect_to @user_upgrade.payment_url redirect_to @user_upgrade.payment_url, allow_other_host: true
end end
private private