DEV: validate param value on /embed/topics

2019-09-04 13:31:46 +05:30 · 2019-09-04 13:31:46 +05:30 · 3e37801d05
parent ed00f35306
commit 3e37801d05
1 changed files with 2 additions and 2 deletions
--- a/app/controllers/embed_controller.rb
+++ b/app/controllers/embed_controller.rb
@ -36,8 +36,8 @@ class EmbedController < ApplicationController
      raise Discourse::InvalidParameters.new(:embed_id) unless @embed_id =~ /^de\-[a-zA-Z0-9]+$/
    end

-    if params.has_key?(:template)
-      @template = params[:template]
+    if params.has_key?(:template) && params[:template] == "complete"
+      @template = "complete"
    else
      @template = "basic"
    end