adding render vuln

This commit is contained in:
Mike McCabe
2015-02-23 20:36:53 -05:00
parent 975002ea76
commit 1eee953f62
3 changed files with 8 additions and 3 deletions
+4 -1
View File
@@ -22,5 +22,8 @@ class DashboardController < ApplicationController
@user = current_user
render :partial => "layouts/dashboard/dashboard_stats"
end
def doc
render "../../doc/" + params[:doc]
end
end