discourse/app/controllers/clicks_controller.rb

# frozen_string_literal: true

class ClicksController < ApplicationController
  skip_before_action :check_xhr, :preload_json, :verify_authenticity_token

  def track
    params.require(%i[url post_id topic_id])

    TopicLinkClick.create_from(
      url: params[:url],
      post_id: params[:post_id],
      topic_id: params[:topic_id],
      ip: request.remote_ip,
      user_id: current_user&.id,
    )

    render json: success_json
  end
end
DEV: enable frozen string literal on all files This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging 2019-05-03 06:17:27 +08:00			`# frozen_string_literal: true`

Initial release of Discourse 2013-02-06 03:16:51 +08:00			`class ClicksController < ApplicationController`
FEATURE: Use Beacon API for tracking clicks. (#7483) 2019-05-07 14:37:43 +08:00			`skip_before_action :check_xhr, :preload_json, :verify_authenticity_token`
Fix all the trailing whitespace 2013-02-07 23:45:24 +08:00
Initial release of Discourse 2013-02-06 03:16:51 +08:00			`def track`
FEATURE: Always track clicks using AJAX. (#7373) 2019-04-23 17:41:36 +08:00			`params.require(%i[url post_id topic_id])`
Initial release of Discourse 2013-02-06 03:16:51 +08:00
FEATURE: Always track clicks using AJAX. (#7373) 2019-04-23 17:41:36 +08:00			`TopicLinkClick.create_from(`
			`url: params[:url],`
			`post_id: params[:post_id],`
			`topic_id: params[:topic_id],`
			`ip: request.remote_ip,`
			`user_id: current_user&.id,`
			`)`
Enabled strong_parameters across all models/controllers. All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that. The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method. It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments. 2013-06-06 15:14:32 +08:00
FEATURE: Always track clicks using AJAX. (#7373) 2019-04-23 17:41:36 +08:00			`render json: success_json`
Enabled strong_parameters across all models/controllers. All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that. The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method. It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments. 2013-06-06 15:14:32 +08:00			`end`
Fix all the trailing whitespace 2013-02-07 23:45:24 +08:00			`end`