docbrown/app/controllers/internal/welcome_controller.rb
Feruz Oripov 0ccc62ffa3 Refactoring possible unprotected redirect. (#3825)
* Refactoring possible unprotected redirect.

* Security refactoring tag_adjustments_controller.rb.

* Security refactoring tag_adjustments_controller.rb.

* Security refactoring articles_controller.rb.

* Security refactoring internal/welcome_controller.rb

* Security refactoring tags_controller.rb.

* Security refactoring comments_controller.rb.

* Security refactoring stories_controller.rb.
2019-08-27 10:13:38 -04:00

34 lines
862 B
Ruby
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

class Internal::WelcomeController < Internal::ApplicationController
layout "internal"
def index
@daily_threads = Article.where("title LIKE 'Welcome Thread - %'")
end
def create
welcome_thread = Article.create(
body_markdown: welcome_thread_content,
user: User.dev_account,
)
redirect_to URI.parse(welcome_thread.path).path + "/edit"
end
private
def welcome_thread_content
<<~HEREDOC
---
title: Welcome Thread - v0
published: false
description: Introduce yourself to the community!
tags: welcome
---
Hey there! Welcome to dev.to!
![WELCOME TO THE INTERNET](https://slack-imgs.com/?c=1&url=http%3A%2F%2Fmedia0.giphy.com%2Fmedia%2FzhbrTTpmSCYog%2Fgiphy-downsized.gif)
Leave a comment below to introduce yourself to the community!
HEREDOC
end
end