SECURITY: Sanitize email id for use as mutex key

2019-07-24 13:45:02 +01:00 · 2019-07-24 13:45:02 +01:00 · 1c4c41107a
commit 1c4c41107a
parent 60f710f2bd
1 changed files with 2 additions and 1 deletions
--- a/lib/email/receiver.rb
+++ b/lib/email/receiver.rb
@ -67,7 +67,8 @@ module Email

    def process!
      return if is_blacklisted?
-      DistributedMutex.synchronize(@message_id) do
+      id_hash = Digest::SHA1.hexdigest(@message_id)
+      DistributedMutex.synchronize("process_email_#{id_hash}") do
        begin
          return if IncomingEmail.exists?(message_id: @message_id)
          ensure_valid_address_lists