raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-01-30 21:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use Arel.sql to curcunvent security restriction on rails 6.1

Browse Source
This commit is contained in:
Luis Ramos
2021-05-13 23:54:57 +01:00
parent f29f525d90
commit 3d2155b60e
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/services/products_renderer.rb
View File

@@ -31,7 +31,9 @@ class ProductsRenderer
return unless order_cycle
@products ||= begin
results = distributed_products.products_relation.order(taxon_order)
results = distributed_products.
products_relation.
order(Arel.sql(taxon_order))
filter_and_paginate(results).
each { |product| product_scoper.scope(product) } # Scope results with variant_overrides