You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@whimsical.apache.org by Sam Ruby <ru...@apache.org> on 2016/01/26 22:22:25 UTC
[whimsy.git] [1/1] Commit 7fbe1c4: untaint reminders
Commit 7fbe1c425c95e3d2befb7d1c003710381c36fe24:
untaint reminders
Branch: refs/heads/master
Author: Sam Ruby <ru...@intertwingly.net>
Committer: Sam Ruby <ru...@intertwingly.net>
Pusher: rubys <ru...@apache.org>
------------------------------------------------------------
www/board/agenda/views/actions/reminder-text.json.rb | +
------------------------------------------------------------
1 changes: 1 additions, 0 deletions.
------------------------------------------------------------
diff --git a/www/board/agenda/views/actions/reminder-text.json.rb b/www/board/agenda/views/actions/reminder-text.json.rb
index 354db36..24bfe70 100644
--- a/www/board/agenda/views/actions/reminder-text.json.rb
+++ b/www/board/agenda/views/actions/reminder-text.json.rb
@@ -2,6 +2,7 @@
require 'active_support/core_ext/integer/inflections.rb'
# read template for the reminders
+@reminder.untaint if @reminder =~ /^reminder\d$/
template = File.read("data/#@reminder.txt")
# find the latest agenda