diff options
| author | Douwe Maan <douwe@gitlab.com> | 2017-05-24 23:59:26 +0300 |
|---|---|---|
| committer | Douwe Maan <douwe@gitlab.com> | 2017-05-24 23:59:26 +0300 |
| commit | 43b1750892369d579edc7cd4e4ea1f7ac8667e34 (patch) | |
| tree | 694921527f2697a38d478abcb585e0297951232b /lib/constraints/user_url_constrainer.rb | |
| parent | c846a8329ab24b551c1e6cc899434c0802769137 (diff) | |
Revert "Remove changes that are not absolutely necessary"
This reverts commit b0498c176fa134761d899c9b369be12f1ca789c5
Diffstat (limited to 'lib/constraints/user_url_constrainer.rb')
| -rw-r--r-- | lib/constraints/user_url_constrainer.rb | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/lib/constraints/user_url_constrainer.rb b/lib/constraints/user_url_constrainer.rb index 28159dc0dec..d16ae7f3f40 100644 --- a/lib/constraints/user_url_constrainer.rb +++ b/lib/constraints/user_url_constrainer.rb @@ -1,5 +1,9 @@ class UserUrlConstrainer def matches?(request) - User.find_by_full_path(request.params[:username], follow_redirects: request.get?).present? + full_path = request.params[:username] + + return false unless DynamicPathValidator.valid_user_path?(full_path) + + User.find_by_full_path(full_path, follow_redirects: request.get?).present? end end |