team-alpha/railsgoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added a very dangerous, very serious vulnerability (constantize

Browse Source
This commit is contained in:
Ken Johnson
2013-06-02 22:42:29 -04:00
parent caecb88e30
commit e97afb9bb4
9 changed files with 100 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/views/benefit_forms/index.html.erb
+61
View File
@@ -0,0 +1,61 @@
<div class="dashboard-wrapper">
<div class="main-container">
<div class="row-fluid">
<div class="span4">
<div class="widget">
<div class="widget-header">
<div class="title">
<span class="fs1" aria-hidden="true" data-icon="&#xe023;"></span> Health Insurance
</div>
</div>
<!-- Begin Widget Body -->
<div class="widget-body">
<%= link_to download_path(:type => "File", :name => "Health_n_Stuff.pdf") do %>
<div class="doc-icons-container">
<div class="icon light-blue hidden-tablet">
<span class="fs1 doc-icon" aria-hidden="true" data-icon="&#xe1b2;"></span>
<span class="doc-type">
PDF
</span>
</div>
</div>
<% end %>
</div>
<!-- End Widget Body -->
</div>
</div>
<div class="span4">
<div class="widget">
<div class="widget-header">
<div class="title">
<span class="fs1" aria-hidden="true" data-icon="&#xe023;"></span> Dental Insurance
</div>
</div>
<!-- Begin Widget Body -->
<div class="widget-body">
<%= link_to download_path(:type => "File", :name => "Dental_n_Stuff.pdf") do %>
<div class="doc-icons-container">
<div class="icon light-blue hidden-tablet">
<span class="fs1 doc-icon" aria-hidden="true" data-icon="&#xe1b2;"></span>
<span class="doc-type">
PDF
</span>
</div>
</div>
<% end %>
</div>
<!-- End Widget Body -->
</div>
</div>
</div>
</div>
</div>
app/views/layouts/shared/_sidebar.html.erb
+3 -3
View File
@@ -18,13 +18,13 @@
<% end %>
</li>
<% end %>
<li>
<a href="#">
<li id="benefit_forms">
<%= link_to user_benefit_forms_path(:user_id => current_user.user_id) do %>
<div class="icon">
<span class="fs1" aria-hidden="true" data-icon="&#xe05c;"></span>
</div>
Benefit Forms
</a>
<% end %>
</li>
<li>
<%= link_to user_retirement_index_path(:user_id => current_user.user_id) do %>