discourse/config/initializers/strong_parameters.rb at 03943554c6f8ece7f2b07d9aa34131ad1954e544 - codeninjasllc/discourse - Forgejo: Beyond coding. We forge.

codeninjasllc/discourse

mirror of https://github.com/codeninjasllc/discourse.git synced 2024-12-21 21:12:39 -05:00

Ian Christian Myers 0d01c33482 Enabled strong_parameters across all models/controllers.

All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that.

The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method.

It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments.

2013-06-06 00:30:59 -07:00

1 line

No EOL

77 B

Ruby

Raw Blame History

ActiveRecord::Base.send(:include, ActiveModel::ForbiddenAttributesProtection)