github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-22 16:02:46 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Sanitize email id for use as mutex key

Browse Source
This commit is contained in:
David Taylor 2019-07-24 13:45:02 +01:00
parent 1d38bf7e2c
commit b3e5f7a8c6
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/email/receiver.rb
View File

@ -67,7 +67,8 @@ module Email
def process!
return if is_blacklisted?
DistributedMutex.synchronize(@message_id) do
id_hash = Digest::SHA1.hexdigest(@message_id)
DistributedMutex.synchronize("process_email_#{id_hash}") do
begin
return if IncomingEmail.exists?(message_id: @message_id)
ensure_valid_address_lists