removes unmasked emails and phones in forms

2015-08-30 15:16:33 +02:00
parent 932612a207
commit 76daee1fb0
8 changed files with 31 additions and 23 deletions
--- a/app/controllers/verification/email_controller.rb
+++ b/app/controllers/verification/email_controller.rb
@@ -1,6 +1,6 @@
 class Verification::EmailController < ApplicationController
  before_action :authenticate_user!
-  before_action :set_verified_user
+  before_action :set_verified_user, only: :create
  skip_authorization_check

  def show
@@ -26,6 +26,10 @@ class Verification::EmailController < ApplicationController
  private

    def set_verified_user
-      @verified_user = VerifiedUser.by_user(current_user).by_email(params[:recipient]).first
+      @verified_user = VerifiedUser.by_user(current_user).where(id: verified_user_params[:id]).first
+    end
+
+    def verified_user_params
+      params.require(:verified_user).permit(:id)
    end
 end