From a5cd661dd9d77c620b38cd0b4593285b1ea34510 Mon Sep 17 00:00:00 2001 From: Bouke van der Bijl Date: Mon, 28 Oct 2013 13:56:57 +0100 Subject: [PATCH] Use public_send on condition creation This makes sure you can't call Kernel methods like `throw` --- lib/liquid/tags/if.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/liquid/tags/if.rb b/lib/liquid/tags/if.rb index 1b46b2c..ce086ef 100644 --- a/lib/liquid/tags/if.rb +++ b/lib/liquid/tags/if.rb @@ -63,7 +63,7 @@ module Liquid raise(SyntaxError.new(options[:locale].t("errors.syntax.if"))) unless expressions.shift.to_s =~ Syntax new_condition = Condition.new($1, $2, $3) - new_condition.send(operator, condition) + new_condition.public_send(operator, condition) condition = new_condition end