workhorse_multipart.rb 664 Bytes
Newer Older
1 2 3
Rails.application.configure do |config|
  config.middleware.use(Gitlab::Middleware::Multipart)
end
4

5 6 7 8 9 10
# The Gitlab::Middleware::Multipart middleware inserts instances of our
# own ::UploadedFile class in the Rack env of requests. These instances
# will be blocked by the 'strong parameters' feature of ActionController
# unless we somehow whitelist them. At the moment it seems the only way
# to do that is by monkey-patching.
#
11 12 13
module Gitlab
  module StrongParameterScalars
    def permitted_scalar?(value)
14
      super || value.is_a?(::UploadedFile)
15 16 17 18 19 20 21 22 23
    end
  end
end

module ActionController
  class Parameters
    prepend Gitlab::StrongParameterScalars
  end
end