diff options
| author | Rafael Mendonça França <rafaelmfranca@gmail.com> | 2012-09-19 09:27:43 -0700 |
|---|---|---|
| committer | Rafael Mendonça França <rafaelmfranca@gmail.com> | 2012-09-19 09:27:43 -0700 |
| commit | 6cbec586731b7c5f293f2a7b6c7330c7181acdfe (patch) | |
| tree | 420f5381085f77c7af516e93eb2e9414f084dd8d | |
| parent | 69e0e3f91b5297d0507441f86e13a60f37ec54d8 (diff) | |
| parent | 9f07782161af3255a929533f81e5efceefe0dc4d (diff) | |
| download | rails-6cbec586731b7c5f293f2a7b6c7330c7181acdfe.tar.gz rails-6cbec586731b7c5f293f2a7b6c7330c7181acdfe.tar.bz2 rails-6cbec586731b7c5f293f2a7b6c7330c7181acdfe.zip | |
Merge pull request #7701 from guilleiguaran/set-permit-all-parameters-explicitly
Set AC::Parameters.permit_all_parameters explicitly to false when config.action_controller.permit_all_parameters is not present
| -rw-r--r-- | actionpack/lib/action_controller/railtie.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_controller/railtie.rb b/actionpack/lib/action_controller/railtie.rb index d7e8194bf6..f2c68432c1 100644 --- a/actionpack/lib/action_controller/railtie.rb +++ b/actionpack/lib/action_controller/railtie.rb @@ -20,7 +20,7 @@ module ActionController end initializer "action_controller.parameters_config" do |app| - ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) + ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) { false } end initializer "action_controller.set_configs" do |app| |