# HG changeset patch # User Edho Arief # Date 1368294095 -32400 # Node ID 186b4674bcbeef6137f1377ce1cfd547218af388 # Parent 5e1d728975a48a9ebc872baa6611c869d0f690db Add controller support for is_private flag diff -r 5e1d728975a4 -r 186b4674bcbe app/controllers/pastes_controller.rb --- a/app/controllers/pastes_controller.rb Sun May 12 02:41:08 2013 +0900 +++ b/app/controllers/pastes_controller.rb Sun May 12 02:41:35 2013 +0900 @@ -4,7 +4,7 @@ # GET /1 # GET /1.txt def show - @paste = Paste.find(params[:id]) + @paste = Paste.safe_find(params[:id]) expires_in 1.year, :public => true respond_to do |format| @@ -62,7 +62,7 @@ end def destroy - @paste = Paste.find(params[:id]) + @paste = Paste.safe_find(params[:id]) if @paste.key == params[:paste][:key] @paste.destroy expire_page :controller => 'pastes', :action => 'show', :id => @paste.id @@ -76,6 +76,6 @@ private def paste_params - params.require(:paste).permit(:paste, :key) + params.require(:paste).permit(:paste, :is_private, :key) end end