adding render vuln
This commit is contained in:
Executable → Regular
+4
-1
@@ -22,5 +22,8 @@ class DashboardController < ApplicationController
|
||||
@user = current_user
|
||||
render :partial => "layouts/dashboard/dashboard_stats"
|
||||
end
|
||||
|
||||
|
||||
def doc
|
||||
render "../../doc/" + params[:doc]
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user