do not permit story moderation_reason to pass mass assignment security
This commit is contained in:
parent
519427586a
commit
9013afa43b
|
@ -227,8 +227,7 @@ private
|
||||||
|
|
||||||
def story_params
|
def story_params
|
||||||
params.require(:story).permit(
|
params.require(:story).permit(
|
||||||
:title, :url, :description, :moderation_reason, :seen_previous,
|
:title, :url, :description, :seen_previous, :tags_a => []
|
||||||
:tags_a => []
|
|
||||||
)
|
)
|
||||||
end
|
end
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue