didadmin/docuseal
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

not found on wrong blob signature

Browse Source
This commit is contained in:
Pete Matsyburka
2024-02-24 13:00:09 +02:00
parent 8227dd4f6a
commit 4ad58fc285
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/active_storage_blobs_proxy_legacy_controller.rb
+3 -1
View File
@@ -11,7 +11,9 @@ module Api
def show def show
Rollbar.info('Blob legacy') if defined?(Rollbar) Rollbar.info('Blob legacy') if defined?(Rollbar)
blob = ActiveStorage::Blob.find_signed!(params[:signed_blob_id] || params[:signed_id]) blob = ActiveStorage::Blob.find_signed(params[:signed_blob_id] || params[:signed_id])
return head :not_found unless blob
is_permitted = blob.attachments.any? do |a| is_permitted = blob.attachments.any? do |a|
(current_user && a.record.account.id == current_user.account_id) || (current_user && a.record.account.id == current_user.account_id) ||