floraachy
/
gitlink-forgeplus
mirror of https://gitlink.org.cn/Gitlink/forgeplus.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

fixed 解决安全问题访问附件，id改为uuid，issue关联附件

This commit is contained in:
xxq250 2023-11-22 11:34:48 +08:00
parent 9526d1b896
commit 168f5bf7d1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/services/api/v1/issues/concerns/loadable.rb
View File

@ -9,7 +9,7 @@ module Api::V1::Issues::Concerns::Loadable
end end
def load_attachments(attachment_ids) def load_attachments(attachment_ids)
@attachments = Attachment.where(id: attachment_ids) @attachments = Attachment.where(id: attachment_ids).or(Attachment.where(uuid: attachment_ids))
end end
def load_atme_receivers(receivers_login) def load_atme_receivers(receivers_login)