github-mirror/discourse
github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-03-11 05:45:30 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Avoid the use of Object#send in Onebox::Engine::StandardEmbed

Browse Source 
Use `Object#public_send` instead which is much safer
This commit is contained in:
Alan Guo Xiang Tan 2024-05-23 10:00:16 +08:00 committed by Nat
parent 26aef0c288
commit 6ce5673d2c
No known key found for this signature in database
GPG Key ID: 4938B35D927EC773
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/onebox/engine/standard_embed.rb
View File

@ -161,7 +161,7 @@ module Onebox
def set_from_normalizer_data(normalizer) def set_from_normalizer_data(normalizer)
normalizer.data.each do |k, _| normalizer.data.each do |k, _|
v = normalizer.send(k) v = normalizer.public_send(k)
@raw[k] ||= v unless v.nil? @raw[k] ||= v unless v.nil?
end end
end end