From 01d565688441af2bdeec3da9d76d4e8652eb83bf Mon Sep 17 00:00:00 2001 From: Bertocq Date: Wed, 20 Dec 2017 14:51:39 +0100 Subject: [PATCH] Fix valid related content url helper method --- app/controllers/related_contents_controller.rb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/app/controllers/related_contents_controller.rb b/app/controllers/related_contents_controller.rb index edfc9d901..aac64dd99 100644 --- a/app/controllers/related_contents_controller.rb +++ b/app/controllers/related_contents_controller.rb @@ -1,6 +1,4 @@ class RelatedContentsController < ApplicationController - VALID_URL = /#{Setting['url']}\/.*\/.*/ - skip_authorization_check respond_to :html, :js @@ -35,7 +33,7 @@ class RelatedContentsController < ApplicationController end def valid_url? - params[:url].match(VALID_URL) + params[:url].start_with?(Setting['url']) end def relationable_object