fixed 解决安全问题访问附件，id改为uuid，issue关联附件

2026-05-02 19:30:48 +08:00 · 2023-11-22 11:34:48 +08:00
parent 9526d1b896
commit 168f5bf7d1
1 changed files with 1 additions and 1 deletions
--- a/app/services/api/v1/issues/concerns/loadable.rb
+++ b/app/services/api/v1/issues/concerns/loadable.rb
@@ -9,7 +9,7 @@ module Api::V1::Issues::Concerns::Loadable
  end

  def load_attachments(attachment_ids)
-    @attachments = Attachment.where(id: attachment_ids)
+    @attachments = Attachment.where(id: attachment_ids).or(Attachment.where(uuid: attachment_ids))
  end

  def load_atme_receivers(receivers_login)