github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-04 11:11:13 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Make sure uploaded_urls have corresponding upload records

Browse Source
This commit is contained in:
Robin Ward
2016-07-28 13:54:17 -04:00
parent cf5b756b1a
commit 2891f230d1
8 changed files with 67 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/models/user_profile.rb
View File

@ -9,6 +9,9 @@ class UserProfile < ActiveRecord::Base
before_save :cook
after_save :trigger_badges
validates :profile_background, upload_url: true
validates :card_background, upload_url: true
belongs_to :card_image_badge, class_name: 'Badge'
has_many :user_profile_views, dependent: :destroy