FIX: if badges are disabled badge pages should 404

danskdynamit · Mar 29, 2016 · ed750ca · ed750ca
1 parent adbc225
commit ed750ca
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/controllers/badges_controller.rb b/app/controllers/badges_controller.rb
@@ -2,6 +2,8 @@ class BadgesController < ApplicationController
   skip_before_filter :check_xhr, only: [:index, :show]
 
   def index
+    raise Discourse::NotFound unless SiteSetting.enable_badges
+
     badges = Badge.all
 
     if (params[:only_listable] == "true") || !request.xhr?
@@ -28,6 +30,8 @@ def index
   end
 
   def show
+    raise Discourse::NotFound unless SiteSetting.enable_badges
+
     params.require(:id)
     badge = Badge.enabled.find(params[:id])