Update agents_controller.rb
When user stay agent details page, user can use action.
But user use "Delete agent" action, then exception error is occurred.
When action of "Delete agent" run, destory is called, it call "redirect_back".
Although @agent is destroyed, redirect_back used "path = agent_path(@agent)" .
So I add for this case.
if message include "deleted", redirect_back is called by destroy.
then redirect_back use "path = agents_path".
KimJungHun
共有 1 个文件被更改，包括 3 次插入 和 1 次删除
+ 3
- 1
app/controllers/agents_controller.rb
@@ -179,7 +179,9 @@ class AgentsController < ApplicationController |
||
| 179 | 179 |
|
| 180 | 180 |
# Sanitize params[:return] to prevent open redirect attacks, a common security issue. |
| 181 | 181 |
def redirect_back(message) |
| 182 |
- if params[:return] == "show" && @agent |
|
| 182 |
+ if params[:return] == "show" && message.include?("deleted")
|
|
| 183 |
+ path = agents_path |
|
| 184 |
+ elsif params[:return] == "show" && @agent |
|
| 183 | 185 |
path = agent_path(@agent) |
| 184 | 186 |
elsif params[:return] =~ /\A#{Regexp::escape scenarios_path}\/\d+\Z/
|
| 185 | 187 |
path = params[:return] |