BigW Consortium Gitlab

workhorse_multipart.rb 761 Bytes
Newer Older
1 2 3
Rails.application.configure do |config|
  config.middleware.use(Gitlab::Middleware::Multipart)
end
4

5 6 7 8 9 10
# The Gitlab::Middleware::Multipart middleware inserts instances of our
# own ::UploadedFile class in the Rack env of requests. These instances
# will be blocked by the 'strong parameters' feature of ActionController
# unless we somehow whitelist them. At the moment it seems the only way
# to do that is by monkey-patching.
#
11 12
module Gitlab
  module StrongParameterScalars
13
    GITLAB_PERMITTED_SCALAR_TYPES = [::UploadedFile].freeze
14 15 16 17 18 19 20 21 22 23 24 25

    def permitted_scalar?(value)
      super || GITLAB_PERMITTED_SCALAR_TYPES.any? { |type| value.is_a?(type) }
    end
  end
end

module ActionController
  class Parameters
    prepend Gitlab::StrongParameterScalars
  end
end