jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Files
fd4eb8fa08eaac9cc60d0c6adb249d5b5fb4980a
danbooru/app/controllers/notes_controller.rb
evazion 8df1496d28 Fix vuln allowing users to move notes between posts. 
Prevents this from working:

    PUT /notes/1.json?note[post_id]=23
    PUT /notes/1.json?note[post_id]=42
2016-10-19 22:54:47 -05:00

2.4 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink