github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-01-31 08:01:01 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: Allow Safe Redirections in Topic Embedding

Browse Source
This commit is contained in:
Robin Ward 2016-09-15 13:56:59 -04:00
parent 596fcfeb58
commit cd571b26ba
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/topic_embed.rb
View File

@ -81,7 +81,7 @@ class TopicEmbed < ActiveRecord::Base
embed_classname_whitelist = SiteSetting.embed_classname_whitelist if SiteSetting.embed_classname_whitelist.present? embed_classname_whitelist = SiteSetting.embed_classname_whitelist if SiteSetting.embed_classname_whitelist.present?
response = FetchResponse.new response = FetchResponse.new
html = open(url).read html = open(url, allow_redirections: :safe).read
raw_doc = Nokogiri::HTML(html) raw_doc = Nokogiri::HTML(html)
auth_element = raw_doc.at('meta[@name="author"]') auth_element = raw_doc.at('meta[@name="author"]')