Fix the Redirect warnings from Brakeman

Unfortunately I've had to leave the check disabed as Brakeman
can't see inside the safe_referer method so doesn't realise that
it is cleaning the referer.
This commit is contained in:
Tom Hughes 2020-07-22 19:13:19 +01:00
parent 86428201dd
commit d4130bcac8
5 changed files with 49 additions and 35 deletions

View file

@ -120,7 +120,7 @@ class MessagesController < ApplicationController
flash[:notice] = t ".destroyed"
if params[:referer]
redirect_to params[:referer]
redirect_to safe_referer(params[:referer])
else
redirect_to :action => :inbox
end