Sanitise parameters used in URL generation

This commit is contained in:
Tom Hughes 2017-06-02 20:26:33 +01:00
parent 4ef7b2c651
commit 80d27a7fae
6 changed files with 48 additions and 44 deletions

View file

@ -1,6 +1,6 @@
atom_feed(:language => I18n.locale, :schema_date => 2009,
:id => url_for(params.merge(:only_path => false)),
:root_url => url_for(params.merge(:action => :list, :format => nil, :only_path => false)),
:id => url_for(@params.merge(:only_path => false)),
:root_url => url_for(@params.merge(:action => :list, :format => nil, :only_path => false)),
"xmlns:georss" => "http://www.georss.org/georss") do |feed|
feed.title changeset_list_title(params, @user)