Skip to content

Instantly share code, notes, and snippets.

@forced-request

forced-request/mitigated_dynamic_render.rb

Last active August 29, 2015 14:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save forced-request/79e825271e946e1b5900 to your computer and use it in GitHub Desktop.
Save forced-request/79e825271e946e1b5900 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
mitigated_dynamic_render.rb
def show
template = params[:id]
d = Dir[“myfolder/*.erb]
if d.include?(“myfolder/#{template}.erb”)
render "myfolder/#{template}"
else
# throw exception or 404
end
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment