Replace URI.unescape with CGI.unescape

See ruby/uri@61c6a47
openSUSE · Mar 15, 2022 · 8869840 · 8869840
1 parent 0e1c23e
commit 8869840
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/api/app/controllers/group_controller.rb b/src/api/app/controllers/group_controller.rb
@@ -64,7 +64,7 @@ def update
 
   # POST for editing it, adding or remove users
   def command
-    group = Group.find_by_title!(URI.unescape(params[:title]))
+    group = Group.find_by_title!(CGI.unescape(params[:title]))
     authorize group, :update?
 
     user = User.find_by_login!(params[:userid]) if params[:userid]

diff --git a/src/api/app/controllers/person_controller.rb b/src/api/app/controllers/person_controller.rb
@@ -226,9 +226,9 @@ def change_my_password
 
     login = xml.elements['/userchangepasswd/login'].text
     password = xml.elements['/userchangepasswd/password'].text
-    login = URI.unescape(login)
+    login = CGI.unescape(login)
 
-    change_password(login, URI.unescape(password))
+    change_password(login, CGI.unescape(password))
     render_ok
   end