mirror of
https://github.com/discourse/discourse.git
synced 2025-05-21 18:12:32 +08:00
FIX: restrict updates on confirm_old_email
email templates
This commit is contained in:
@ -7,6 +7,12 @@ class Admin::SiteTextsController < Admin::AdminController
|
||||
'login_required.welcome_message']
|
||||
end
|
||||
|
||||
def self.restricted_keys
|
||||
['user_notifications.confirm_old_email.title',
|
||||
'user_notifications.confirm_old_email.subject_template',
|
||||
'user_notifications.confirm_old_email.text_body_template']
|
||||
end
|
||||
|
||||
def index
|
||||
overridden = params[:overridden] == 'true'
|
||||
extras = {}
|
||||
@ -80,7 +86,7 @@ class Admin::SiteTextsController < Admin::AdminController
|
||||
end
|
||||
|
||||
def find_site_text
|
||||
raise Discourse::NotFound unless I18n.exists?(params[:id])
|
||||
raise Discourse::NotFound unless I18n.exists?(params[:id]) && !self.class.restricted_keys.include?(params[:id])
|
||||
record_for(params[:id])
|
||||
end
|
||||
|
||||
|
Reference in New Issue
Block a user