From 96d0b1c67bc1f2a2881298ff898954ba00cd563f Mon Sep 17 00:00:00 2001 From: Alexis Reigel Date: Thu, 12 Apr 2018 14:13:06 +0200 Subject: require uploaded file's name to match in any case --- app/controllers/concerns/uploads_actions.rb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'app/controllers/concerns') diff --git a/app/controllers/concerns/uploads_actions.rb b/app/controllers/concerns/uploads_actions.rb index a62d45db43d..98a55a6d82c 100644 --- a/app/controllers/concerns/uploads_actions.rb +++ b/app/controllers/concerns/uploads_actions.rb @@ -31,13 +31,17 @@ module UploadsActions disposition = uploader.image_or_video? ? 'inline' : 'attachment' + if uploader.filename == params[:filename] + return send_upload(uploader, attachment: uploader.filename, disposition: disposition) + end + uploader_version = uploader.versions.values.find { |version| version.filename == params[:filename] } if uploader_version return send_upload(uploader_version, attachment: uploader_version.filename, disposition: disposition) end - return send_upload(uploader, attachment: uploader.filename, disposition: disposition) + render_404 end private -- cgit v1.2.3