SECURITY: prefer render plain/html to render text where possible

2025-05-28 22:37:37 +08:00 · 2017-04-10 08:01:25 -04:00
parent e49f3a408e
commit 0013a23dc1
9 changed files with 17 additions and 17 deletions
--- a/app/controllers/admin/email_controller.rb
+++ b/app/controllers/admin/email_controller.rb
@ -85,7 +85,7 @@ class Admin::EmailController < Admin::AdminController
  def handle_mail
    params.require(:email)
    Email::Processor.process!(params[:email])
-    render text: "email was processed"
+    render plain: "email was processed"
  end

  def raw_email