gunghogeoduck/osem-fcy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix too loose strong Booth parameters

Browse source 
People should not be able to change the state, conference or timestamps of
booths.
This commit is contained in:
Henne Vogelsang 2026-03-17 15:55:22 +01:00
parent cf87cc6280
commit d588fb00da
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/controllers/booths_controller.rb
View file

@ -94,7 +94,6 @@ class BoothsController < ApplicationController
private private
def booth_params def booth_params
params.require(:booth).permit(:title, :description, :reasoning, :state, :picture, :conference_id, params.require(:booth).permit(:title, :description, :reasoning, :picture, :website_url, :submitter_relationship, responsible_ids: [])
:created_at, :updated_at, :submitter_relationship, :website_url, responsible_ids: [])
end end
end end