diff options
author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2013-01-20 16:04:25 +0000 |
---|---|---|
committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2013-01-20 16:04:25 +0000 |
commit | 15f035be518d65f6a8debed0dd19d58190e8b492 (patch) | |
tree | fab1590ec1a3066899a34b4b5c9aef50a1852d30 /app/controllers | |
parent | 6e6ce7c08595fbc2b1562d89099a6d6bad769cd5 (diff) | |
download | redmine-15f035be518d65f6a8debed0dd19d58190e8b492.tar.gz redmine-15f035be518d65f6a8debed0dd19d58190e8b492.zip |
Respond with 404 when params[:ids] is missing (#12898).
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11226 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/controllers')
-rw-r--r-- | app/controllers/context_menus_controller.rb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/app/controllers/context_menus_controller.rb b/app/controllers/context_menus_controller.rb index 553353bc0..bc434ea12 100644 --- a/app/controllers/context_menus_controller.rb +++ b/app/controllers/context_menus_controller.rb @@ -21,6 +21,7 @@ class ContextMenusController < ApplicationController def issues @issues = Issue.visible.all(:conditions => {:id => params[:ids]}, :include => :project) + (render_404; return) unless @issues.present? if (@issues.size == 1) @issue = @issues.first end @@ -74,6 +75,8 @@ class ContextMenusController < ApplicationController def time_entries @time_entries = TimeEntry.all( :conditions => {:id => params[:ids]}, :include => :project) + (render_404; return) unless @time_entries.present? + @projects = @time_entries.collect(&:project).compact.uniq @project = @projects.first if @projects.size == 1 @activities = TimeEntryActivity.shared.active |