IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

Revert "SECURITY: Fix XSS on unsubscribed page."

Browse Source 
This reverts commit 190558db9d.
This commit is contained in:
Guo Xiang Tan
2017-10-09 09:03:07 +08:00
parent 190558db9d
commit 6fe604b93e
4 changed files with 2 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/controllers/invites_controller.rb
View File

@@ -96,7 +96,6 @@ class InvitesController < ApplicationController
guardian.ensure_can_invite_to_forum!(groups)
topic = Topic.find_by(id: params[:topic_id])
guardian.ensure_can_see_topic?(topic)
group_ids = groups.map(&:id)
invite_exists = Invite.where(email: params[:email], invited_by_id: current_user.id).first