Download as
Browse Code »

Commit 78cfdefbf923417838e5b477b8e4c6b791f5df62

Authored by JoenioCosta
1 parent 7b8823c2
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

ActionItem192: fixing xss_terminate plugin :only option 

git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@1719 3f533792-8f58-4932-b0fe-aaf55b0a4547
Showing 1 changed file with 2 additions and 2 deletions   Show diff stats
vendor/plugins/xss_terminate/lib/xss_terminate.rb
  Diff comments   View file @78cfdef
... ... @@ -56,7 +56,7 @@ module XssTerminate
56 56 columns_serialized = self.class.serialized_attributes.keys
57 57  
58 58 if !xss_terminate_options[:only].empty?
59   - columns.select{ |i| xss_terminate_options[:only].include?( i ) }
  59 + columns = columns.select{ |i| xss_terminate_options[:only].include?( i.to_sym ) }
60 60 elsif !xss_terminate_options[:except].empty?
61 61 columns.delete_if{ |i| xss_terminate_options[:except].include?( i.to_sym ) }
62 62 end
... ... @@ -67,7 +67,7 @@ module XssTerminate
67 67 next unless self[field]
68 68 self[field].each_key { |key|
69 69 key = key.to_sym
70   - self[field][key] = xss_terminate_options[:sanitizer].sanitize(self[field][key].to_s)
  70 + self[field][key] = xss_terminate_options[:sanitizer].sanitize(self[field][key])
71 71 }
72 72 else
73 73 self[field] = xss_terminate_options[:sanitizer].sanitize(self[field])
... ...