floraachy/gitlink-forgeplus
1
0
Fork 0
mirror of https://gitlink.org.cn/Gitlink/forgeplus.git synced 2026-05-03 03:40:49 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: sql attack

Browse Source
This commit is contained in:
vilet.yy
2021-06-17 16:13:40 +08:00
parent 880f09a94a
commit 09dfd504c2
17 changed files with 59 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/organizations/organizations_controller.rb
View File

@@ -88,11 +88,11 @@ class Organizations::OrganizationsController < Organizations::BaseController
end
def sort_by
params.fetch(:sort_by, "created_at")
OrganizationExtension.column_names.include?(params[:sort_by]) ? params[:sort_by] : 'created_at'
end
def sort_direction
params.fetch(:sort_direction, "desc")
%w(desc asc).include?(params[:sort_direction]) ? params[:sort_direction] : 'desc'
end
end

4
app/controllers/organizations/projects_controller.rb
View File

@@ -36,10 +36,10 @@ class Organizations::ProjectsController < Organizations::BaseController
end
def sort
params.fetch(:sort_by, "updated_on")
Project.column_names.include?(params[:sort_by]) ? params[:sort_by] : 'updated_on'
end
def sort_direction
params.fetch(:sort_direction, "desc")
%w(desc asc).include?(params[:sort_direction]) ? params[:sort_direction] : 'desc'
end
end