diff options
author | Guillermo Iguaran <guilleiguaran@gmail.com> | 2012-09-19 10:02:54 -0500 |
---|---|---|
committer | Guillermo Iguaran <guilleiguaran@gmail.com> | 2012-09-19 10:26:09 -0500 |
commit | 9f07782161af3255a929533f81e5efceefe0dc4d (patch) | |
tree | f91ff2b9be2913a1de782fa2ce24588a9a79fbef | |
parent | 5dc5560090d366e14265d1283e5027d8eaa48fc0 (diff) | |
download | rails-9f07782161af3255a929533f81e5efceefe0dc4d.tar.gz rails-9f07782161af3255a929533f81e5efceefe0dc4d.tar.bz2 rails-9f07782161af3255a929533f81e5efceefe0dc4d.zip |
Set AC::Parameters.permit_all_parameters explicitly to false when config.action_controller.permit_all_parameters is not present
-rw-r--r-- | actionpack/lib/action_controller/railtie.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_controller/railtie.rb b/actionpack/lib/action_controller/railtie.rb index d7e8194bf6..f2c68432c1 100644 --- a/actionpack/lib/action_controller/railtie.rb +++ b/actionpack/lib/action_controller/railtie.rb @@ -20,7 +20,7 @@ module ActionController end initializer "action_controller.parameters_config" do |app| - ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) + ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) { false } end initializer "action_controller.set_configs" do |app| |