SECURITY: Sanitize email id for use as mutex key

Mystery-cyf · Jul 24, 2019 · e9c0fb0 · e9c0fb0
1 parent c4ff66e
commit e9c0fb0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/email/receiver.rb b/lib/email/receiver.rb
@@ -67,7 +67,8 @@ def initialize(mail_string, opts = {})
 
     def process!
       return if is_blacklisted?
-      DistributedMutex.synchronize(@message_id) do
+      id_hash = Digest::SHA1.hexdigest(@message_id)
+      DistributedMutex.synchronize("process_email_#{id_hash}") do
         begin
           return if IncomingEmail.exists?(message_id: @message_id)
           ensure_valid_address_lists