SECURITY: Do not show latest/top topics on 404 for login_required sites

This commit is contained in:
David Taylor 2017-08-13 19:02:44 +03:00 committed by Arpit Jalan
parent ae8bd6c825
commit 77977dd32c

View File

@ -2,7 +2,8 @@
<h1 class="page-not-found"><%= t 'page_not_found.title' %></h1>
<div class="row page-not-found-topics">
<% unless SiteSetting.login_required? && current_user.nil? %>
<div class="row page-not-found-topics">
<div class="span8 popular-topics">
<h2 class="popular-topics-title"><%= t 'page_not_found.popular_topics' %></h2>
<% @top_viewed.each do |t| %>
@ -23,7 +24,8 @@
<br/>
<a href="<%= path "/latest" %>" class="btn"><%= t 'page_not_found.see_more' %>&hellip;</a>
</div>
</div>
</div>
<% end %>
<%- unless @hide_google %>
<div class="row">