github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-02 15:54:43 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

replace the upload type whitelist with a sanitizer

Browse Source
This commit is contained in:
Régis Hanol
2017-05-18 12:13:13 +02:00
parent 8e5b0c79ae
commit 13e489b4ca
4 changed files with 12 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/models/upload.rb
View File

@ -21,9 +21,6 @@ class Upload < ActiveRecord::Base
validates_with ::Validators::UploadValidator
CROPPED_TYPES ||= %w{avatar card_background custom_emoji profile_background}.each(&:freeze)
UPLOAD_TYPES ||= CROPPED_TYPES + %w{composer category_logo category_background wizard_logo_url wizard_logo_small_url wizard_favicon_url wizard_apple_touch_icon_url}.each(&:freeze)
def thumbnail(width = self.width, height = self.height)
optimized_images.find_by(width: width, height: height)
end