diff options
| author | Zeger-Jan van de Weg <zegerjan@gitlab.com> | 2016-03-07 12:06:54 +0300 |
|---|---|---|
| committer | Zeger-Jan van de Weg <zegerjan@gitlab.com> | 2016-03-13 15:13:19 +0300 |
| commit | 1cefb73a9c067b1e2367a28b5c6852cf52d6b886 (patch) | |
| tree | 9cd855428a7569abb89f3635a1b0d9a5e3e77c91 /app/controllers/projects/imports_controller.rb | |
| parent | a3b626bf2544a1ad98651a2a2c5cdd13dc934e12 (diff) | |
Check redirect path in the continue_params
Fixes
https://dev.gitlab.org/gitlab/gitlabhq/issues/2649
https://gitlab.com/gitlab-org/gitlab-ce/issues/13956
Diffstat (limited to 'app/controllers/projects/imports_controller.rb')
| -rw-r--r-- | app/controllers/projects/imports_controller.rb | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/app/controllers/projects/imports_controller.rb b/app/controllers/projects/imports_controller.rb index 196996f1752..3756fc9139c 100644 --- a/app/controllers/projects/imports_controller.rb +++ b/app/controllers/projects/imports_controller.rb @@ -1,4 +1,6 @@ class Projects::ImportsController < Projects::ApplicationController + include ContinueToParams + # Authorize before_action :authorize_admin_project! before_action :require_no_repo, only: [:new, :create] @@ -44,16 +46,6 @@ class Projects::ImportsController < Projects::ApplicationController private - def continue_params - continue_params = params[:continue] - - if continue_params - continue_params.permit(:to, :notice, :notice_now) - else - nil - end - end - def finished_notice if @project.forked? 'The project was successfully forked.' |