jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Files
e67194c19d01b8ebb216fe60c8844850237b2a2a
danbooru/app/controllers/notes_controller.rb
evazion 8df1496d28 Fix vuln allowing users to move notes between posts. 
Prevents this from working:

    PUT /notes/1.json?note[post_id]=23
    PUT /notes/1.json?note[post_id]=42
2016-10-19 22:54:47 -05:00

2.4 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink