fix improper usage of strong parameters in FiltersController

This commit is contained in:
Serge Paquet 2014-02-05 17:02:12 -05:00
parent f9778044f0
commit 70a70096db

View file

@ -15,7 +15,7 @@ class FiltersController < ApplicationController
end
def update
tags_param = params.permit(:tags => [])[:tags]
tags_param = params[:tags]
new_tags = tags_param.blank? ? [] : Tag.where(:tag => tags_param).to_a
new_tags.keep_if {|t| t.valid_for? @user }