Merge pull request #617 from sonalkr132/hakiri_dos

solves DOS on hakiri
This commit is contained in:
Henne Vogelsang 2015-04-20 17:23:24 +02:00
commit b2c7d9be99

View file

@ -179,8 +179,8 @@ module Admin
def add_user def add_user
@user = User.find_by(email: params[:user][:email]) @user = User.find_by(email: params[:user][:email])
@selection = params[:role].parameterize.underscore @selection = params[:role]
@user.add_role @selection.to_sym, @conference @user.add_role @selection, @conference
@role_users = get_users(@selection) @role_users = get_users(@selection)
render 'roles', formats: [:js] render 'roles', formats: [:js]
@ -188,7 +188,7 @@ module Admin
def remove_user def remove_user
@selection = params[:role] @selection = params[:role]
@user.revoke @selection.to_sym, @conference @user.revoke @selection, @conference
@role_users = get_users(@selection) @role_users = get_users(@selection)
render 'roles', formats: [:js] render 'roles', formats: [:js]