fix error

This commit is contained in:
chiu 2021-08-04 20:08:42 +08:00
parent 6f14f00478
commit 4843a52134
1 changed files with 1 additions and 1 deletions

View File

@ -497,7 +497,7 @@ class AnnouncementsController < ApplicationController
end
def get_file
@url = request.path
render :text => "Path not allow",:status => 404 if @url.match(/\/\.\./)
render :text => "Path not allow",:status => 404 and return if @url.match(/\/\.\./)
begin
file = BulletinFile.find(params[:id])
if File.basename(file.file.path) != URI.decode(params[:f_name])