Fix too loose strong parameters in the admin interface

There are some attributes that we don't use and/or that should
not be changeable, even by admins.
This commit is contained in:
Henne Vogelsang 2026-03-17 15:59:42 +01:00
parent d588fb00da
commit d6e36f2845
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6
12 changed files with 12 additions and 14 deletions

View file

@ -130,8 +130,7 @@ module Admin
end
def booth_params
params.require(:booth).permit(:title, :description, :reasoning, :state, :picture, :conference_id,
:created_at, :updated_at, :submitter_relationship, :website_url, responsible_ids: [])
params.require(:booth).permit(:title, :description, :reasoning, :picture, :website_url, :submitter_relationship, responsible_ids: [])
end
end
end