diff options
| author | Felipe Artur <felipefac@gmail.com> | 2019-08-08 22:29:45 +0300 |
|---|---|---|
| committer | Felipe Artur <felipefac@gmail.com> | 2019-08-19 17:51:55 +0300 |
| commit | fb93142488cfb79bac45f184b7945018550bf326 (patch) | |
| tree | f387e1df2b8b708ca73b836cccc5c03831eb9458 /app/mailers | |
| parent | 1dfbb27f6e8d01023564eededff2a0ba1a04badc (diff) | |
Prevent disclosure of merge request id via email
Do not disclosure merge request id via email for unauthorized users
when closing issues.
Diffstat (limited to 'app/mailers')
| -rw-r--r-- | app/mailers/emails/issues.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/mailers/emails/issues.rb b/app/mailers/emails/issues.rb index f3a3203f7ad..0bba2a8bf24 100644 --- a/app/mailers/emails/issues.rb +++ b/app/mailers/emails/issues.rb @@ -34,6 +34,8 @@ module Emails setup_issue_mail(issue_id, recipient_id, closed_via: closed_via) @updated_by = User.find(updated_by_user_id) + @recipient = User.find(recipient_id) + mail_answer_thread(@issue, issue_thread_options(updated_by_user_id, recipient_id, reason)) end |