mirror of
https://github.com/openSUSE/osem.git
synced 2026-08-13 19:54:02 +00:00
Fix too loose strong Booth parameters
People should not be able to change the state, conference or timestamps of booths.
This commit is contained in:
parent
cf87cc6280
commit
d588fb00da
1 changed files with 1 additions and 2 deletions
|
|
@ -94,7 +94,6 @@ class BoothsController < ApplicationController
|
|||
private
|
||||
|
||||
def booth_params
|
||||
params.require(:booth).permit(:title, :description, :reasoning, :state, :picture, :conference_id,
|
||||
:created_at, :updated_at, :submitter_relationship, :website_url, responsible_ids: [])
|
||||
params.require(:booth).permit(:title, :description, :reasoning, :picture, :website_url, :submitter_relationship, responsible_ids: [])
|
||||
end
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue