FIX: Missing variable

2014-01-02 11:55:45 -05:00 · 2014-01-02 11:55:45 -05:00 · 15faa01178
parent 46fe78cf8f
commit 15faa01178
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/embed_controller.rb
+++ b/app/controllers/embed_controller.rb
@ -25,7 +25,7 @@ class EmbedController < ApplicationController

      if !(Rails.env.development? && current_user.try(:admin?))
        raise Discourse::InvalidAccess.new('embeddable host not set') if SiteSetting.embeddable_host.blank?
-        raise Discourse::InvalidAccess.new('invalid referer host') if uri.host != SiteSetting.embeddable_host
+        raise Discourse::InvalidAccess.new('invalid referer host') if URI(request.referer || '').host != SiteSetting.embeddable_host
      end

      response.headers['X-Frame-Options'] = "ALLOWALL"