aboutsummaryrefslogtreecommitdiffstats
path: root/app/controllers
diff options
context:
space:
mode:
Diffstat (limited to 'app/controllers')
-rw-r--r--app/controllers/active_storage/disk_controller.rb4
1 files changed, 1 insertions, 3 deletions
diff --git a/app/controllers/active_storage/disk_controller.rb b/app/controllers/active_storage/disk_controller.rb
index 6be88d2857..76377a0f20 100644
--- a/app/controllers/active_storage/disk_controller.rb
+++ b/app/controllers/active_storage/disk_controller.rb
@@ -45,9 +45,7 @@ class ActiveStorage::DiskController < ActionController::Base
ActiveStorage.verifier.verified(params[:encoded_token], purpose: :blob_token)
end
- # FIXME: Validate Content-Length when we're using integration tests. Controller tests don't
- # populate the header properly when a request body is provided.
def acceptable_content?(token)
- token[:content_type] == request.content_type
+ token[:content_type] == request.content_type && token[:content_length] == request.content_length
end
end