didadmin/docuseal
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

check signed blob data purpose

Browse Source
This commit is contained in:
Pete Matsyburka
2024-02-24 13:04:14 +02:00
parent 4ad58fc285
commit c81b4d855b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/active_storage_blobs_proxy_controller.rb
+2 -2
View File
@@ -10,9 +10,9 @@ module Api
before_action :set_cors_headers before_action :set_cors_headers
def show def show
blob_uuid, = ApplicationRecord.signed_id_verifier.verified(params[:signed_uuid]) blob_uuid, purp = ApplicationRecord.signed_id_verifier.verified(params[:signed_uuid])
if blob_uuid.blank? if blob_uuid.blank? || purp != 'blob'
Rollbar.error('Blob not found') if defined?(Rollbar) Rollbar.error('Blob not found') if defined?(Rollbar)
return head :not_found return head :not_found