adminbruno/docuseal
1
0 Fork 0
mirror of https://github.com/docusealco/docuseal synced 2026-11-05 06:42:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

check signed blob data purpose

Browse Source
This commit is contained in:
Pete Matsyburka committed 2024-02-24 13:04:14 +02:00
1 parent 4ad58fc285
commit c81b4d855b
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/active_storage_blobs_proxy_controller.rb
+2 -2
View File
@@ -10,9 +10,9 @@ module Api
before_action :set_cors_headers
def show
blob_uuid, = ApplicationRecord.signed_id_verifier.verified(params[:signed_uuid])
blob_uuid, purp = ApplicationRecord.signed_id_verifier.verified(params[:signed_uuid])
if blob_uuid.blank?
if blob_uuid.blank? || purp != 'blob'
Rollbar.error('Blob not found') if defined?(Rollbar)
return head :not_found