Remove to_sym from condition creation

This prevents a DoS http://www.tricksonrails.com/2010/06/avoid-memory-leaks-in-ruby-rails-code-and-protect-against-denial-of-service/
This commit is contained in:
Bouke van der Bijl
2013-10-28 13:57:28 +01:00
parent 9b910a4e6d
commit 511ee7fbe1
+1 -1
View File
@@ -63,7 +63,7 @@ module Liquid
raise(SyntaxError.new(options[:locale].t("errors.syntax.if"))) unless expressions.shift.to_s =~ Syntax
new_condition = Condition.new($1, $2, $3)
new_condition.send(operator.to_sym, condition)
new_condition.send(operator, condition)
condition = new_condition
end