mirror of
https://github.com/discourse/discourse.git
synced 2024-11-23 19:01:52 +08:00
b61e10f9ad
We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type. |
||
---|---|---|
.. | ||
components | ||
controllers | ||
fabricators | ||
fixtures | ||
integration | ||
integrity | ||
javascripts | ||
mailers | ||
models | ||
phantom_js | ||
requests | ||
services | ||
support | ||
views/omniauth_callbacks | ||
spec_helper.rb |