Fixes attachments functionality for (custom) plugins broken since fix for CVE-2022-44030 by adding a dynamic routing constraint which can be modified by plugins (#39862).

Patch by @jkraemer.

git-svn-id: https://svn.redmine.org/redmine/trunk@22551 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Marius Balteanu
2023-12-22 02:08:53 +00:00
parent cb10b529cb
commit c17b42509b
4 changed files with 34 additions and 1 deletions

View File

@@ -43,5 +43,10 @@ class RoutingPluginsTest < Redmine::RoutingTest
should_route 'GET /plugin_articles' => 'plugin_articles#index'
should_route 'GET /bar_plugin_articles' => 'bar_plugin_articles#index'
assert_equal("/bar_plugin_articles", plugin_articles_path)
should_route(
'GET /attachments/plugin_articles/12/edit' => 'attachments#edit_all',
object_id: '12',
object_type: 'plugin_articles'
)
end
end