diff --git a/app/controllers/api/active_storage_blobs_proxy_controller.rb b/app/controllers/api/active_storage_blobs_proxy_controller.rb index 87eea303..0a9c68c1 100644 --- a/app/controllers/api/active_storage_blobs_proxy_controller.rb +++ b/app/controllers/api/active_storage_blobs_proxy_controller.rb @@ -12,7 +12,7 @@ module Api def show blob_uuid, purp, exp = ApplicationRecord.signed_id_verifier.verified(params[:signed_uuid]) - if blob_uuid.blank? || purp != 'blob' || (exp && exp < Time.current.to_i) + if blob_uuid.blank? || (purp.present? && purp != 'blob') || (exp && exp < Time.current.to_i) Rollbar.error('Blob not found') if defined?(Rollbar) return head :not_found