Using the `_html` suffix automatically marks texts as HTML safe, so doing so on sanitized texts is redundant. Note flash texts are not sanitized the moment they are generated, but are sanitized when displayed in the view.
29 lines
818 B
Ruby
29 lines
818 B
Ruby
class FollowsController < ApplicationController
|
|
before_action :authenticate_user!
|
|
load_and_authorize_resource
|
|
|
|
def create
|
|
@follow = Follow.create(user: current_user, followable: find_followable)
|
|
flash.now[:notice] = t("shared.followable.#{followable_translation_key(@follow.followable)}.create.notice")
|
|
render :refresh_follow_button
|
|
end
|
|
|
|
def destroy
|
|
@follow = Follow.find(params[:id])
|
|
@follow.destroy
|
|
flash.now[:notice] = t("shared.followable.#{followable_translation_key(@follow.followable)}.destroy.notice")
|
|
render :refresh_follow_button
|
|
end
|
|
|
|
private
|
|
|
|
def find_followable
|
|
params[:followable_type].constantize.find(params[:followable_id])
|
|
end
|
|
|
|
def followable_translation_key(followable)
|
|
followable.class.name.parameterize(separator: "_")
|
|
end
|
|
|
|
end
|