do not permit story moderation_reason to pass mass assignment security

This commit is contained in:
Serge Paquet 2014-02-03 17:14:49 -05:00
parent 519427586a
commit 9013afa43b

View file

@ -227,8 +227,7 @@ private
def story_params
params.require(:story).permit(
:title, :url, :description, :moderation_reason, :seen_previous,
:tags_a => []
:title, :url, :description, :seen_previous, :tags_a => []
)
end