Implemented strong_parameters for Invite/InvitesController.

The email parameter is now required using strong parameters and will throw ActionController::ParameterMissing if it is missing. If the email address is incorrect or invalid, Discourse::InvalidParameters will still be thrown.
This commit is contained in:
Ian Christian Myers
2013-06-05 00:04:03 -07:00
parent 130d837952
commit 3b245031a4
3 changed files with 3 additions and 2 deletions

View File

@ -29,7 +29,7 @@ class InvitesController < ApplicationController
end
def destroy
requires_parameter(:email)
params.require(:email)
invite = Invite.where(invited_by_id: current_user.id, email: params[:email]).first
raise Discourse::InvalidParameters.new(:email) if invite.blank?