Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix exceptions on /posts/:id/events, /moderator/dashboard; fix XSS in data-source. #2929

Merged
merged 3 commits into from Mar 21, 2017

Conversation

evazion
Copy link
Member

@evazion evazion commented Mar 21, 2017

Fixes a few bugs in the last round of pull requests I sent:

47ecf03 - /posts/:id/events - fixes an exception when page is viewed by a mod.
2aa3f9c - /moderator/dashboard: fix exception when PostArchive isn't enabled (see http://testbooru.donmai.us/moderator/dashboard).
d1debec - Fix XSS in post thumbnail data attributes (I added a data-source attribute but I forgot to escape it).

    NoMethodError exception raised

    undefined method `creator' for #<PostEvent:0x007f9a298e64d8> Did you mean? creator_id
    app/views/post_events/index.html.erb:23:in `block in _app_views_post_events_index_html_erb__2088986421112502721_70150054247640'
    app/views/post_events/index.html.erb:18:in `each'
    app/views/post_events/index.html.erb:18:in `_app_views_post_events_index_html_erb__2088986421112502721_70150054247640'
    app/controllers/post_events_controller.rb:6:in `index'
    NoMethodError exception raised

    undefined method `each' for nil:NilClass
    app/views/moderator/dashboards/_activity_tag.html.erb:10:in `_app_views_moderator_dashboards__activity_tag_html_erb__4366063041301266690_47304449138520'
    app/views/moderator/dashboards/show.html.erb:10:in `_app_views_moderator_dashboards_show_html_erb___734721021521262965_47304462731220'
@r888888888 r888888888 merged commit 30cef2e into danbooru:master Mar 21, 2017
@evazion evazion deleted the fix-post-events-mods branch March 27, 2017 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants