Loïc Guitaut e871865a61 FIX: Sanitize parameters provided to user actions ...

Currently, providing things like `filter[%24acunetix]=1` to
`UserActionsController#index` will throw an exception because instead of
getting a string as expected, we get a hash instead.

This patch simply uses `#permit` from strong parameters properly: first
we apply it on the whole parameters, this way it filters the keys we’re
interested in. By doing this, if the value is a hash for example, the
whole key/value pair will be ignored completely.

2022-02-23 15:46:40 +01:00

..

assets

DEV: Don't check this.element in @afterRender (#16033)

2022-02-23 11:35:20 +01:00

controllers

FIX: Sanitize parameters provided to user actions

2022-02-23 15:46:40 +01:00

helpers

FIX: Update application_helper logic now that Ember CLI is default (#15935)

2022-02-14 13:48:18 +00:00

jobs

DEV: pull email address validation out to a new EmailAddressValidator

2022-02-17 21:49:22 -05:00

mailers

FEATURE: Allow sending group SMTP emails with from alias (#15687)

2022-02-07 13:52:01 +10:00

models

PERF: perform all cached counting in background (#15991)

2022-02-22 16:45:25 +00:00

serializers

FEATURE: mute subcategory when parent category is muted (#15966)

2022-02-17 00:42:02 +01:00

services

DEV: Add chat_quoted notification type (#15968)

2022-02-16 15:22:08 +10:00

views

PERF: Update ember-auto-import and webpack (#15919)

2022-02-14 11:21:39 +00:00