Fix too loose strong Booth parameters

People should not be able to change the state, conference or timestamps of
booths.
This commit is contained in:
Henne Vogelsang 2026-03-17 15:55:22 +01:00
parent cf87cc6280
commit d588fb00da
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6

View file

@ -94,7 +94,6 @@ class BoothsController < ApplicationController
private
def booth_params
params.require(:booth).permit(:title, :description, :reasoning, :state, :picture, :conference_id,
:created_at, :updated_at, :submitter_relationship, :website_url, responsible_ids: [])
params.require(:booth).permit(:title, :description, :reasoning, :picture, :website_url, :submitter_relationship, responsible_ids: [])
end
end