mirror of
https://github.com/discourse/discourse.git
synced 2024-11-22 11:44:49 +08:00
SECURITY: Avoid the use of Object#send
in Onebox::Engine::StandardEmbed
Use `Object#public_send` instead which is much safer
This commit is contained in:
parent
311b737c91
commit
10afe5fcf1
|
@ -161,7 +161,7 @@ module Onebox
|
|||
|
||||
def set_from_normalizer_data(normalizer)
|
||||
normalizer.data.each do |k, _|
|
||||
v = normalizer.send(k)
|
||||
v = normalizer.public_send(k)
|
||||
@raw[k] ||= v unless v.nil?
|
||||
end
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue
Block a user