Fix possible remote execution code exploit in TourController

instedd · Mar 2, 2017 · 6ef04f8 · 6ef04f8
1 parent 037aac7
commit 6ef04f8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/controllers/tour_controller.rb b/app/controllers/tour_controller.rb
@@ -17,6 +17,6 @@
 
 class TourController < ApplicationController
   def show
-    render (params[:page] ||= 'start')
+    render (params[:page].to_s ||= 'start')
   end
-end
+end