aboutsummaryrefslogtreecommitdiffstats
path: root/app/controllers
diff options
context:
space:
mode:
authorDavid Heinemeier Hansson <david@loudthinking.com>2018-09-18 16:08:42 -0700
committerDavid Heinemeier Hansson <david@loudthinking.com>2018-09-18 16:08:42 -0700
commit31ff0f7b6cc4ec7bbc70a9472e01215cd9b046e8 (patch)
treecab29fc40eb2abeec33a96223528dd1398c41757 /app/controllers
parent4a9b45ce2214573de29eed694e4416d46642244f (diff)
downloadrails-31ff0f7b6cc4ec7bbc70a9472e01215cd9b046e8.tar.gz
rails-31ff0f7b6cc4ec7bbc70a9472e01215cd9b046e8.tar.bz2
rails-31ff0f7b6cc4ec7bbc70a9472e01215cd9b046e8.zip
Remember to add access protection
Diffstat (limited to 'app/controllers')
-rw-r--r--app/controllers/action_mailroom/inbound_emails_controller.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/action_mailroom/inbound_emails_controller.rb b/app/controllers/action_mailroom/inbound_emails_controller.rb
index 0c74d4b29a..e5970b38ec 100644
--- a/app/controllers/action_mailroom/inbound_emails_controller.rb
+++ b/app/controllers/action_mailroom/inbound_emails_controller.rb
@@ -1,3 +1,4 @@
+# TODO: Add access protection using basic auth with verified tokens. Maybe coming from credentials by default?
class ActionMailroom::InboundEmailsController < ActionController::Base
skip_forgery_protection
before_action :require_rfc822_message