fixed 解决安全问题访问附件，id改为uuid

2026-05-02 19:30:48 +08:00 · 2023-11-22 11:17:22 +08:00
parent 6ae4aded65
commit 2ea41d0100
5 changed files with 25 additions and 3 deletions
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -299,7 +299,7 @@ module ApplicationHelper
  end

  def download_url attachment,options={}
-    attachment_path(attachment,options)
+    attachment&.uuid.present? ? attachment_path(attachment.uuid,options) : attachment_path(attachment,options)
  end

  # 耗时：天、小时、分、秒