diff options
| author | Kevin Deisz <kevin.deisz@gmail.com> | 2018-08-24 16:10:17 -0400 |
|---|---|---|
| committer | Kevin Deisz <kevin.deisz@gmail.com> | 2018-08-24 16:10:17 -0400 |
| commit | c14859513a648270705b61210dc3ab2fe5d04004 (patch) | |
| tree | df253cd04ba9ffb7f4797eebe4af1031d1b0f5cc /actionpack/lib/action_dispatch/http | |
| parent | e2d8a2ccfd3b0d2030920346a2ff0cad93fcb188 (diff) | |
| download | rails-c14859513a648270705b61210dc3ab2fe5d04004.tar.gz rails-c14859513a648270705b61210dc3ab2fe5d04004.tar.bz2 rails-c14859513a648270705b61210dc3ab2fe5d04004.zip | |
Convert over the rest of the whitelist references
Diffstat (limited to 'actionpack/lib/action_dispatch/http')
| -rw-r--r-- | actionpack/lib/action_dispatch/http/mime_negotiation.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_dispatch/http/mime_negotiation.rb b/actionpack/lib/action_dispatch/http/mime_negotiation.rb index d7435fa8df..580f5fe41a 100644 --- a/actionpack/lib/action_dispatch/http/mime_negotiation.rb +++ b/actionpack/lib/action_dispatch/http/mime_negotiation.rb @@ -87,7 +87,7 @@ module ActionDispatch else raise ArgumentError, "request.variant must be set to a Symbol or an Array of Symbols. " \ "For security reasons, never directly set the variant to a user-provided value, " \ - "like params[:variant].to_sym. Check user-provided value against a whitelist first, " \ + "like params[:variant].to_sym. Check user-provided value against a permitted list first, " \ "then set the variant: request.variant = :tablet if params[:variant] == 'tablet'" end end |