github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-03 19:39:30 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: limit amount of links in custom sidebar section (#22543)

Browse Source 
Custom sidebar section can have maximum of 50 links

Co-authored-by: Krzysztof Kotlarek <kotlarek.krzysztof@gmail.com>
This commit is contained in:
Blake Erickson
2023-07-11 15:25:01 -06:00
committed by GitHub
parent eed7d86601
commit 52b003d915
4 changed files with 50 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/models/sidebar_section.rb
View File

@ -11,7 +11,9 @@ class SidebarSection < ActiveRecord::Base
source: :linkable,
source_type: "SidebarUrl"
accepts_nested_attributes_for :sidebar_urls, allow_destroy: true
accepts_nested_attributes_for :sidebar_urls,
allow_destroy: true,
limit: -> { SiteSetting.max_sidebar_section_links }
before_save :set_system_user_for_public_section