Handle incorrectly encoded tag keys

app/controllers/changeset_tags_controller.rb

@@ -22,6 +22,11 @@ def delete
     end
     begin
       @key = Base64.urlsafe_decode64(params[:base64_key].to_s)
+    rescue ArgumentError
+      render :action => "invalid_tag", :status => :not_found
+      return
+    end
+    begin
       @changeset_tag = ChangesetTag.find([params[:changeset_id], @key])
     rescue ActiveRecord::RecordNotFound
       render :action => "tag_not_found", :status => :not_found

app/views/changeset_tags/invalid_tag.html.erb

@@ -0,0 +1,7 @@
+<% content_for :heading do %>
+  <h1><%= t(".heading") %></h1>
+<% end %>
+
+<div>
+  <p><%= t ".body" %>
+</div>

config/locales/en.yml

@@ -447,6 +447,9 @@ en:
     changeset_not_found:
       heading: Changeset does not exist
       body: "Sorry, changeset #%{id} could not be found."
+    invalid_tag:
+      heading: Invalid changeset tag
+      body: "Sorry, the requested tag key cannot be decoded."
     tag_not_found:
       heading: Changeset tag does not exist
       body: "Sorry, tag %{key} could not be found in changeset #%{id}."

test/controllers/changeset_tags_controller_test.rb

@@ -149,6 +149,16 @@ def test_delete_fail_no_changeset
     assert_response :not_found
   end
 
+  def test_delete_fail_invalid_key_encoding
+    changeset = create(:changeset)
+    moderator_user = create(:moderator_user)
+
+    session_for(moderator_user)
+
+    post delete_changeset_tags_path(changeset, :params => { :base64_key => "ZnJvbV9jb" })
+    assert_response :not_found
+  end
+
   def test_delete_fail_no_key
     changeset = create(:changeset)
     moderator_user = create(:moderator_user)