fixed security issue

This commit is contained in:
zmagod 2016-09-13 13:57:31 +02:00
parent 3d5a42cc27
commit 7c363d5ade

View file

@ -34,6 +34,7 @@ class ResultsController < ApplicationController
def load_vars
@result = Result.find_by_id(params[:id])
return render_403 unless @result
@my_module = @result.my_module
end