|
|
@@ -179,9 +179,7 @@ class AgentsController < ApplicationController
|
179
|
179
|
|
180
|
180
|
# Sanitize params[:return] to prevent open redirect attacks, a common security issue.
|
181
|
181
|
def redirect_back(message)
|
182
|
|
- if params[:return] == "show" && @agent.destroyed?
|
183
|
|
- path = agents_path
|
184
|
|
- elsif params[:return] == "show" && @agent
|
|
182
|
+ if params[:return] == "show" && @agent && !@agent.destroyed?
|
185
|
183
|
path = agent_path(@agent)
|
186
|
184
|
elsif params[:return] =~ /\A#{Regexp::escape scenarios_path}\/\d+\Z/
|
187
|
185
|
path = params[:return]
|