about summary refs log tree commit diff
path: root/app/controllers/media_proxy_controller.rb
diff options
context:
space:
mode:
authorMatt Jankowski <matt@jankowski.online>2023-03-25 19:38:32 -0400
committerGitHub <noreply@github.com>2023-03-26 00:38:32 +0100
commite633b26f4f69c068f6479e09254a6ae2277b73dd (patch)
tree0267898f58e46803e447f6d7f47c2de1b2556025 /app/controllers/media_proxy_controller.rb
parente63524f45792af83cf802270c3beebc76bada645 (diff)
Add allow_other_host in redirects which may go outside app (#24252)
Diffstat (limited to 'app/controllers/media_proxy_controller.rb')
-rw-r--r--app/controllers/media_proxy_controller.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/media_proxy_controller.rb b/app/controllers/media_proxy_controller.rb
index 3b228722f..f29b69a24 100644
--- a/app/controllers/media_proxy_controller.rb
+++ b/app/controllers/media_proxy_controller.rb
@@ -23,7 +23,7 @@ class MediaProxyController < ApplicationController
       redownload! if @media_attachment.needs_redownload? && !reject_media?
     end
 
-    redirect_to full_asset_url(@media_attachment.file.url(version))
+    redirect_to full_asset_url(@media_attachment.file.url(version)), allow_other_host: true
   end
 
   private