summaryrefslogtreecommitdiffstats
path: root/app/controllers
diff options
context:
space:
mode:
authorJean-Philippe Lang <jp_lang@yahoo.fr>2013-01-20 16:04:25 +0000
committerJean-Philippe Lang <jp_lang@yahoo.fr>2013-01-20 16:04:25 +0000
commit15f035be518d65f6a8debed0dd19d58190e8b492 (patch)
treefab1590ec1a3066899a34b4b5c9aef50a1852d30 /app/controllers
parent6e6ce7c08595fbc2b1562d89099a6d6bad769cd5 (diff)
downloadredmine-15f035be518d65f6a8debed0dd19d58190e8b492.tar.gz
redmine-15f035be518d65f6a8debed0dd19d58190e8b492.zip
Respond with 404 when params[:ids] is missing (#12898).
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11226 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/controllers')
-rw-r--r--app/controllers/context_menus_controller.rb3
1 files changed, 3 insertions, 0 deletions
diff --git a/app/controllers/context_menus_controller.rb b/app/controllers/context_menus_controller.rb
index 553353bc0..bc434ea12 100644
--- a/app/controllers/context_menus_controller.rb
+++ b/app/controllers/context_menus_controller.rb
@@ -21,6 +21,7 @@ class ContextMenusController < ApplicationController
def issues
@issues = Issue.visible.all(:conditions => {:id => params[:ids]}, :include => :project)
+ (render_404; return) unless @issues.present?
if (@issues.size == 1)
@issue = @issues.first
end
@@ -74,6 +75,8 @@ class ContextMenusController < ApplicationController
def time_entries
@time_entries = TimeEntry.all(
:conditions => {:id => params[:ids]}, :include => :project)
+ (render_404; return) unless @time_entries.present?
+
@projects = @time_entries.collect(&:project).compact.uniq
@project = @projects.first if @projects.size == 1
@activities = TimeEntryActivity.shared.active