noosfero | Adds upload quotas for profiles (!1301)

[Leandro Nunes]

Leandro Nunes started a new discussion on app/controllers/admin/profile_quotas_controller.rb:

> +      respond_to do |format|
> +        format.js
> +        format.json { render json: @profiles.map(&:name) }
> +      end
> +    else
> +      @filters = type_filters
> +      klasses = [Person, Community, Enterprise]
> +      @kinds = klasses.map do |klass|
> +        [ klass, environment.kinds.where(:type => klass.to_s) ]
> +      end.to_h
> +    end
> +  end
> +
> +  def edit_class
> +    begin
> +      @klass = (params['type'] || '').capitalize.constantize

please limit this constantize for secutiry reason

---
Reply to this email directly or view it on GitLab: https://gitlab.com/noosfero/noosfero/merge_requests/1301#note_38294716
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listas.softwarelivre.org/pipermail/noosfero-dev/attachments/20170823/7c1cd2f2/attachment.html>