github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-12-17 05:26:22 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Do not show latest/top topics on 404 for login_required sites

Browse Source
This commit is contained in:
David Taylor 2017-08-13 19:02:44 +03:00 committed by Arpit Jalan
parent ae8bd6c825
commit 77977dd32c
1 changed files with 23 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/views/exceptions/not_found.html.erb
View File

@ -2,6 +2,7 @@
<h1 class="page-not-found"><%= t 'page_not_found.title' %></h1> <h1 class="page-not-found"><%= t 'page_not_found.title' %></h1>
<% unless SiteSetting.login_required? && current_user.nil? %>
<div class="row page-not-found-topics"> <div class="row page-not-found-topics">
<div class="span8 popular-topics"> <div class="span8 popular-topics">
<h2 class="popular-topics-title"><%= t 'page_not_found.popular_topics' %></h2> <h2 class="popular-topics-title"><%= t 'page_not_found.popular_topics' %></h2>
@ -24,6 +25,7 @@
<a href="<%= path "/latest" %>" class="btn"><%= t 'page_not_found.see_more' %>&hellip;</a> <a href="<%= path "/latest" %>" class="btn"><%= t 'page_not_found.see_more' %>&hellip;</a>
</div> </div>
</div> </div>
<% end %>
<%- unless @hide_google %> <%- unless @hide_google %>
<div class="row"> <div class="row">