FIX: Return 400 when username params is invalid.

2025-05-21 18:12:32 +08:00 · 2019-01-30 16:04:47 +08:00
parent 421d47da1e
commit 60c1cd9f81
2 changed files with 10 additions and 0 deletions
--- a/app/controllers/admin/email_controller.rb
+++ b/app/controllers/admin/email_controller.rb
@ -89,6 +89,8 @@ class Admin::EmailController < Admin::AdminController
    params.require(:last_seen_at)
    params.require(:username)
    user = User.find_by_username(params[:username])
+    raise Discourse::InvalidParameters unless user
+
    renderer = Email::Renderer.new(UserNotifications.digest(user, since: params[:last_seen_at]))
    render json: MultiJson.dump(html_content: renderer.html, text_content: renderer.text)
  end