22 lines
485 B
Ruby
22 lines
485 B
Ruby
class StaticController < ApplicationController
|
|
|
|
skip_before_filter :check_xhr
|
|
|
|
def show
|
|
|
|
page = params[:id]
|
|
|
|
# Don't allow paths like ".." or "/" or anything hacky like that
|
|
page.gsub!(/[^a-z0-9\_\-]/, '')
|
|
|
|
file = "static/#{page}.html"
|
|
templates = lookup_context.find_all(file)
|
|
if templates.any?
|
|
render "static/#{page}", layout: !request.xhr?, formats: [:html]
|
|
return
|
|
end
|
|
|
|
render file: 'public/404', layout: false, status: 404
|
|
end
|
|
|
|
end |