Prevent CSRF bypass updating account details

[rails.git] / app / models / client_application.rb

diff --git a/app/models/client_application.rb b/app/models/client_application.rb
index b3abb82be7d7af9c694f8cf0bf972c2c9abf03dd..ee39c294b934bab921dc919bcf9b202037acb67f 100644 (file)
--- a/app/models/client_application.rb
+++ b/app/models/client_application.rb
@@ -66,7 +66,7 @@ class ClientApplication < ApplicationRecord
   end
 
   def oauth_server
   end
 
   def oauth_server

-    @oauth_server ||= OAuth::Server.new("https://" + Settings.server_url)
+    @oauth_server ||= OAuth::Server.new("https://#{Settings.server_url}")

   end
 
   def credentials
   end
 
   def credentials