fixed 解决安全问题访问附件，id改为uuid

2026-05-22 20:55:46 +08:00 · 2023-12-12 14:31:21 +08:00
parent 0cb38bce4f
commit d74901cffa
8 changed files with 82 additions and 49 deletions
--- a/app/services/api/v1/issues/concerns/loadable.rb
+++ b/app/services/api/v1/issues/concerns/loadable.rb
@@ -9,7 +9,7 @@ module Api::V1::Issues::Concerns::Loadable
  end

  def load_attachments(attachment_ids)
-    @attachments = Attachment.where(id: attachment_ids)
+    @attachments = Attachment.where(id: attachment_ids).or(Attachment.where(uuid: attachment_ids))
  end

  def load_atme_receivers(receivers_login)