mirror of
https://github.com/discourse/discourse.git
synced 2025-05-22 22:43:33 +08:00
Implemented strong_parameters for Invite/InvitesController.
The email parameter is now required using strong parameters and will throw ActionController::ParameterMissing if it is missing. If the email address is incorrect or invalid, Discourse::InvalidParameters will still be thrown.
This commit is contained in:
@ -29,7 +29,7 @@ class InvitesController < ApplicationController
|
||||
end
|
||||
|
||||
def destroy
|
||||
requires_parameter(:email)
|
||||
params.require(:email)
|
||||
|
||||
invite = Invite.where(invited_by_id: current_user.id, email: params[:email]).first
|
||||
raise Discourse::InvalidParameters.new(:email) if invite.blank?
|
||||
|
Reference in New Issue
Block a user