blob: 600d3c8cc883eefdc733065a1f50c7db54e0db24 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# Monkey patch for CVE-2013-4389
# derived from http://seclists.org/oss-sec/2013/q4/118 to fix
# a possible DoS vulnerability in the log subscriber component of
# Action Mailer.
require 'action_mailer'
module ActionMailer
class LogSubscriber < ActiveSupport::LogSubscriber
def deliver(event)
recipients = Array.wrap(event.payload[:to]).join(', ')
info("\nSent mail to #{recipients} (#{event.duration.round(1)}ms)")
debug(event.payload[:mail])
end
end
end
|
