discourse/app
Ian Christian Myers 0d01c33482 Enabled strong_parameters across all models/controllers.
All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that.

The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method.

It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments.
2013-06-06 00:30:59 -07:00
..
assets Temporarily roll back ember rc5. We identified some things we need to fix. 2013-06-06 01:25:43 -04:00
controllers Enabled strong_parameters across all models/controllers. 2013-06-06 00:30:59 -07:00
helpers FIX: Again, try to get a flexible absolute logo_url 2013-06-05 18:23:43 -04:00
mailers Better HTML emails, smarter email digests, new email section in admin with digest preview 2013-06-05 17:47:25 -04:00
models Enabled strong_parameters across all models/controllers. 2013-06-06 00:30:59 -07:00
serializers Better HTML emails, smarter email digests, new email section in admin with digest preview 2013-06-05 17:47:25 -04:00
services Automatically flag someone as a spammer if their posts get at least X spam flags from N users while their trust level is 'new user'. Staff can clear and set this status from the user record in admin. 2013-06-03 16:37:40 -04:00
views Allow images in the daily digest for top scoring posts 2013-06-05 18:55:27 -04:00