discourse/app/models/user_upload.rb
Sam 69bc8f526a SECURITY: only allow picking of avatars created by self (#6417)
* SECURITY: only allow picking of avatars created by self

Also adds origin tracking to all uploads including de-duplicated uploads
2018-12-18 13:57:49 +08:00

5 lines
82 B
Ruby

class UserUpload < ActiveRecord::Base
belongs_to :upload
belongs_to :user
end