diff --git a/app/controllers/asks_controller.rb b/app/controllers/asks_controller.rb index e6c6e60..5c5e140 100644 --- a/app/controllers/asks_controller.rb +++ b/app/controllers/asks_controller.rb @@ -160,6 +160,9 @@ class AsksController < ActionController::Base end def create + if !params[:referer_url].blank? && !params[:referer_url].to_s.start_with?("/") + render :file => "#{Rails.root}/app/views/errors/403.html", :layout => false, :status => 403 and return + end @ask_question = AskQuestion.new() temp_params = create_params all_to_save = []