mirror of
https://github.com/discourse/discourse.git
synced 2024-11-25 02:11:08 -06:00
SECURITY: Avoid the use of Object#send
in Onebox::Engine::StandardEmbed
Use `Object#public_send` instead which is much safer
This commit is contained in:
parent
311b737c91
commit
10afe5fcf1
@ -161,7 +161,7 @@ module Onebox
|
||||
|
||||
def set_from_normalizer_data(normalizer)
|
||||
normalizer.data.each do |k, _|
|
||||
v = normalizer.send(k)
|
||||
v = normalizer.public_send(k)
|
||||
@raw[k] ||= v unless v.nil?
|
||||
end
|
||||
end
|
||||
|
Loading…
Reference in New Issue
Block a user