Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

some safety

This commit is contained in:
Sam 2013-04-18 10:04:42 +10:00
parent 723df0b964
commit 2a65dd41d4
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/oneboxer/discourse_local_onebox.rb
View File

@ -19,6 +19,8 @@ module Oneboxer
case route[:controller] case route[:controller]
when 'users' when 'users'
user = User.where(username_lower: route[:username].downcase).first user = User.where(username_lower: route[:username].downcase).first
return nil unless user
Guardian.new.ensure_can_see!(user) Guardian.new.ensure_can_see!(user)
args.merge! avatar: PrettyText.avatar_img(user.username, 'tiny'), username: user.username args.merge! avatar: PrettyText.avatar_img(user.username, 'tiny'), username: user.username
@ -29,6 +31,8 @@ module Oneboxer
if route[:post_number].present? && route[:post_number].to_i > 1 if route[:post_number].present? && route[:post_number].to_i > 1
# Post Link # Post Link
post = Post.where(topic_id: route[:topic_id], post_number: route[:post_number].to_i).first post = Post.where(topic_id: route[:topic_id], post_number: route[:post_number].to_i).first
return nil unless post
Guardian.new.ensure_can_see!(post) Guardian.new.ensure_can_see!(post)
topic = post.topic topic = post.topic
@ -46,8 +50,10 @@ module Oneboxer
else else
# Topic Link # Topic Link
topic = Topic.where(id: route[:topic_id].to_i).includes(:user).first topic = Topic.where(id: route[:topic_id].to_i).includes(:user).first
return nil unless topic
Guardian.new.ensure_can_see!(topic)
post = topic.posts.first post = topic.posts.first
Guardian.new(nil).ensure_can_see!(topic)
posters = topic.posters_summary.map do |p| posters = topic.posters_summary.map do |p|
{username: p[:user][:username], {username: p[:user][:username],