This repository has been archived on 2019-05-14. You can view files and clone it, but cannot push or open issues or pull requests.
mastodon/app/controllers/media_controller.rb

25 lines
544 B
Ruby
Raw Normal View History

# frozen_string_literal: true
class MediaController < ApplicationController
include Authorization
before_action :verify_permitted_status
def show
redirect_to media_attachment.file.url(:original)
end
private
def media_attachment
MediaAttachment.attached.find_by!(shortcode: params[:id])
end
def verify_permitted_status
authorize media_attachment.status, :show?
rescue Mastodon::NotPermittedError
# Reraise in order to get a 404 instead of a 403 error code
raise ActiveRecord::RecordNotFound
end
end