Download as
Browse Code »

Commit 1cc1598d1678bba595c22d92e4a074ab5641d245

Authored by Vinicius Brand
1 parent fd438e0d
Exists in master and in 18 other branches add_member_task_reject_details, admin_visible_profile, community_notifications, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, organization_ratings_improvements, profile_api_improvements, ratings_minor_fixes, send_email_to_admins, stable-spb-1.4, stable-spb-1.5, web_steps_improvements

bugfix in xss permission - map in my_profile

Showing 1 changed file with 2 additions and 0 deletions   Show diff stats
app/controllers/my_profile/maps_controller.rb
  Diff comments   View file @1cc1598
1 class MapsController < MyProfileController 1 class MapsController < MyProfileController
2 2
  3 + skip_before_filter :verify_authenticity_token, only: [:google_map]
  4 +
3 protect 'edit_profile', :profile 5 protect 'edit_profile', :profile
4 6
5 def edit_location 7 def edit_location