catstodon/app/controllers/media_controller.rb
Eugen Rochko 7b9f8766e8 Fix #416 - Generate random unique 14-byte (19 characters) shortcodes
for local attachments, use them in URLs. Check status privacy
before redirecting to actual file.
2017-01-06 00:29:12 +01:00

16 lines
434 B
Ruby

# frozen_string_literal: true
class MediaController < ApplicationController
before_action :set_media_attachment
def show
redirect_to @media_attachment.file.url(:original)
end
private
def set_media_attachment
@media_attachment = MediaAttachment.where.not(status_id: nil).find_by!(shortcode: params[:id])
raise ActiveRecord::RecordNotFound unless @media_attachment.status.permitted?(current_account)
end
end