fix vulnerability

app/controllers/asks_controller.rb

@@ -160,6 +160,9 @@ class AsksController < ActionController::Base
   end
 
   def create
+    if !params[:referer_url].blank? && !params[:referer_url].to_s.start_with?("/")
+      render :file => "#{Rails.root}/app/views/errors/403.html", :layout => false, :status => 403 and return
+    end
     @ask_question = AskQuestion.new()
     temp_params = create_params
     all_to_save = []