From 693845083e690812ba570cafe7f5d9b6811c273e Mon Sep 17 00:00:00 2001 From: Andre Sakata Date: Sun, 25 Sep 2016 20:30:35 -0300 Subject: [PATCH] Make sure that user can send message to the chatroom (security). --- app/channels/chatrooms_channel.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/channels/chatrooms_channel.rb b/app/channels/chatrooms_channel.rb index 6a1861c..a1e197c 100644 --- a/app/channels/chatrooms_channel.rb +++ b/app/channels/chatrooms_channel.rb @@ -11,7 +11,7 @@ def unsubscribed end def send_message(data) - @chatroom = Chatroom.find(data["chatroom_id"]) + @chatroom = current_user.chatrooms.find(data["chatroom_id"]) message = @chatroom.messages.create(body: data["body"], user: current_user) MessageRelayJob.perform_later(message) end