fix(security): remove CSRF bypass from virus scan endpoint

NavdeepKaur1811 · NavdeepKaur1811 · commit ace396b40a3f · 2025-08-06T12:22:18.000-07:00
diff --git a/app/controllers/api/storage_controller.rb b/app/controllers/api/storage_controller.rb
@@ -1,7 +1,6 @@
 class Api::StorageController < Api::ApplicationController
   skip_after_action :verify_authorized
   skip_after_action :verify_policy_scoped
-  skip_before_action :verify_authenticity_token, only: [:virus_scan]
 
   def upload
     #https://shrinerb.com/docs/plugins/presign_endpoint#calling-from-a-controller
