diff options
| author | Steve Hull <sdhull@users.noreply.github.com> | 2018-04-16 12:50:18 -0700 |
|---|---|---|
| committer | Steve Hull <sdhull@users.noreply.github.com> | 2018-04-16 14:38:20 -0700 |
| commit | e539f2d5850c00ba40514af9b8f1961b0f208fe6 (patch) | |
| tree | 06cf768148d5020ac73a7dad5320f2b134bcf3dd /actionpack/CHANGELOG.md | |
| parent | 37b373a8d2a1cd132bbde51cd5a3abd4ecee433b (diff) | |
| download | rails-e539f2d5850c00ba40514af9b8f1961b0f208fe6.tar.gz rails-e539f2d5850c00ba40514af9b8f1961b0f208fe6.tar.bz2 rails-e539f2d5850c00ba40514af9b8f1961b0f208fe6.zip | |
Fixes StrongParameters permit! to work with nested arrays
`permit!` is intended to mark all instances of `ActionController::Parameters` as permitted, however nested arrays of params were not being marked permitted because the method did shallow iteration.
This fixes that by flattening the array before calling `permit!` on all each item.
Diffstat (limited to 'actionpack/CHANGELOG.md')
| -rw-r--r-- | actionpack/CHANGELOG.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index 152ec3700b..56542b7c87 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,3 +1,10 @@ +* Fix strong parameters `permit!` with nested arrays + + Strong parameters doesn't support nested arrays, take as example: `[[{ name: 'Leonardo', age: 26 }]]`. + This is separate from making `permit(something: [[:key]])` work properly, which is being addressed in #23650 + + *Steve Hull* + * Move default headers configuration into their own module that can be included in controllers. *Kevin Deisz* |