meineerde/redmine
1
0
Fork 0
mirror of https://github.com/meineerde/redmine.git synced 2026-02-10 12:45:24 +00:00
Code Issues Releases Wiki Activity

Don't verify CSRF authenticity token in mail handler (#37030).

Browse Source 
Patch by Go MAEDA.


git-svn-id: https://svn.redmine.org/redmine/trunk@21568 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Marius Balteanu 2022-05-11 20:09:16 +00:00
parent 5e1e8684fc
commit 1d02d8ec0b
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/controllers/mail_handler_controller.rb
View File

@ -22,6 +22,9 @@ class MailHandlerController < ActionController::Base
before_action :check_credential
# Requests from rdm-mailhandler.rb don't contain CSRF tokens
skip_before_action :verify_authenticity_token
# Displays the email submission form
def new
end

7
test/functional/mail_handler_controller_test.rb
View File

@ -170,4 +170,11 @@ class MailHandlerControllerTest < Redmine::ControllerTest
end
assert_response :success
end
def test_should_skip_verify_authenticity_token
ActionController::Base.allow_forgery_protection = true
assert_nothing_raised {test_should_create_issue}
ensure
ActionController::Base.allow_forgery_protection = false
end
end