discourse/app/controllers/static_controller.rb

28 lines
661 B
Ruby

class StaticController < ApplicationController
skip_before_filter :check_xhr
def show
page = params[:id]
# Don't allow paths like ".." or "/" or anything hacky like that
page.gsub!(/[^a-z0-9\_\-]/, '')
# Some variables to substitute
@company_shortname = 'CDCK'
@company_fullname = 'Civilized Discourse Construction Kit, Inc.'
@company_domain = 'discourse.org'
file = "static/#{page}.html"
templates = lookup_context.find_all(file)
if templates.any?
render "static/#{page}", layout: !request.xhr?, formats: [:html]
return
end
render file: 'public/404', layout: false, status: 404
end
end