FIX: not permitted theme params when importing theme
This commit is contained in:
parent
1eda8c50f0
commit
813df1a3fb
|
@ -26,13 +26,13 @@ class Admin::ThemesController < Admin::AdminController
|
|||
|
||||
def import
|
||||
@theme = nil
|
||||
if params[:theme]
|
||||
json = JSON::parse(params[:theme].read)
|
||||
uploaded_theme = params.require(:theme)
|
||||
if uploaded_theme
|
||||
json = JSON::parse(uploaded_theme.read)
|
||||
theme = json['theme']
|
||||
|
||||
@theme = Theme.new(name: theme["name"], user_id: current_user.id)
|
||||
theme["theme_fields"]&.each do |field|
|
||||
|
||||
if field["raw_upload"]
|
||||
begin
|
||||
tmp = Tempfile.new
|
||||
|
|
Loading…
Reference in New Issue