chiu
/
personal_technique
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix vulnerable.

This commit is contained in:
BoHung Chiu 2022-11-01 21:08:59 +08:00
parent b379b6e0ff
commit a75c50c6f4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/personal_techniques_controller.rb
View File

@ -154,7 +154,7 @@ class PersonalTechniquesController < ApplicationController
techniques = techniques.where(:id.in=>tmp_techniques.map{|p| p.id})
elsif select_field.split(".").count > 1
relate_name = select_field.split(".").first
field_name = select_field.split(".").last
field_name = select_field.split(".").last.gsub(/^\$+/, '')
relate = relate_name.classify.constantize
relate_ids = relate.where(field_name=>/#{gsub_invalid_character(keywords)}/).pluck(:id)
techniques = techniques.where("#{relate_name.singularize}_id"=>{'$in'=>relate_ids})