mirror of
https://github.com/codeninjasllc/discourse.git
synced 2024-11-24 16:18:42 -05:00
b61e10f9ad
We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type. |
||
---|---|---|
.. | ||
fonts | ||
images | ||
javascripts | ||
stylesheets |