diff options
author | Louise Crow <louise.crow@gmail.com> | 2014-04-04 10:51:57 +0100 |
---|---|---|
committer | Louise Crow <louise.crow@gmail.com> | 2014-04-04 10:51:57 +0100 |
commit | 637f83a8200024fc7d9f9edbf208b716714db400 (patch) | |
tree | d7f0f4d75035169dda3c0f404411a0c8398cca76 /app/controllers/application_controller.rb | |
parent | 0b6dc324f305ca22d084cd7429752ff145d9772f (diff) | |
parent | b16bd59bc5a58cebe3f9fbf3d031f813bb720cff (diff) |
Merge branch 'rails-3-develop' of ssh://git.mysociety.org/data/git/public/alaveteli into rails-3-develop
Diffstat (limited to 'app/controllers/application_controller.rb')
-rw-r--r-- | app/controllers/application_controller.rb | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 370e8e15c..410778d9a 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -131,6 +131,7 @@ class ApplicationController < ActionController::Base case exception when ActiveRecord::RecordNotFound, RouteNotFound @status = 404 + sanitize_path(params) when PermissionDenied @status = 403 else @@ -441,6 +442,15 @@ class ApplicationController < ActionController::Base `git log -1 --format="%H"`.strip end + # URL Encode the path parameter for use in render_exception + # + # params - the params Hash + # + # Returns a Hash + def sanitize_path(params) + params.merge!(:path => Rack::Utils.escape(params[:path])) if params.key?(:path) + end + # URL generating functions are needed by all controllers (for redirects), # views (for links) and mailers (for use in emails), so include them into # all of all. |