gunghogeoduck/osem-fcy
1
0
Fork 0
mirror of https://github.com/openSUSE/osem.git synced 2026-08-18 14:11:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix too loose strong parameters in the admin interface

Browse source 
There are some attributes that we don't use and/or that should
not be changeable, even by admins.
This commit is contained in:
Henne Vogelsang 2026-03-17 15:59:42 +01:00
parent d588fb00da
commit d6e36f2845
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6
12 changed files with 12 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/admin/venues_controller.rb
View file

@ -46,7 +46,7 @@ module Admin
private
def venue_params
params.require(:venue).permit(:name, :street, :postalcode, :city, :country, :longitude, :latitude, :description, :website, :picture, :picture_cache, :lodgings_attributes, :conference_id)
params.require(:venue).permit(:name, :street, :postalcode, :city, :country, :longitude, :latitude, :description, :website, :picture, :picture_cache, :lodgings_attributes)
end
end
end