diff options
| author | Alyssa Ross <hi@alyssa.is> | 2016-11-23 23:31:38 +0000 |
|---|---|---|
| committer | Andrea Faulds <ajf@ajf.me> | 2016-11-24 00:30:58 +0000 |
| commit | cefef2c57197a06d403b9cbe13e969e08aaf5301 (patch) | |
| tree | a25d334dd3b5ea3c8281b1f71dd13c89064faaf9 /app/controllers/api | |
| parent | 7161f91313b51c8425bd184dc5374084fd4e68a8 (diff) | |
Extract filename obfuscation into module
Diffstat (limited to 'app/controllers/api')
| -rw-r--r-- | app/controllers/api/v1/media_controller.rb | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/app/controllers/api/v1/media_controller.rb b/app/controllers/api/v1/media_controller.rb index 23cc9bb7c..f8139ade7 100644 --- a/app/controllers/api/v1/media_controller.rb +++ b/app/controllers/api/v1/media_controller.rb @@ -4,13 +4,13 @@ class Api::V1::MediaController < ApiController before_action -> { doorkeeper_authorize! :write } before_action :require_user! + include ObfuscateFilename + obfuscate_filename :file + respond_to :json def create - file = params[:file] - # Change so Paperclip won't expose the actual filename - file.original_filename = "media" + File.extname(file.original_filename) - @media = MediaAttachment.create!(account: current_user.account, file: file) + @media = MediaAttachment.create!(account: current_user.account, file: params[:file]) rescue Paperclip::Errors::NotIdentifiedByImageMagickError render json: { error: 'File type of uploaded media could not be verified' }, status: 422 rescue Paperclip::Error |