diff options
| author | Rafael França <rafaelmfranca@gmail.com> | 2017-04-19 16:57:23 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-04-19 16:57:23 -0400 |
| commit | 3d1154f7eac660f4f43554d7fa88e5c9c7e4887d (patch) | |
| tree | ca3bd1d06e90ea7dcde276f56262ae9a1cc15413 /actionpack/lib/action_dispatch/routing.rb | |
| parent | 54fa07f2c87a7aad9a17539e409497e46d2607cd (diff) | |
| parent | 93034ad7fea7e00562103a7cd0acfab19bbfadf9 (diff) | |
| download | rails-3d1154f7eac660f4f43554d7fa88e5c9c7e4887d.tar.gz rails-3d1154f7eac660f4f43554d7fa88e5c9c7e4887d.tar.bz2 rails-3d1154f7eac660f4f43554d7fa88e5c9c7e4887d.zip | |
Merge pull request #28734 from rafaelfranca/strong-parameters
Improve the upgrade path of Strong Parameters
Diffstat (limited to 'actionpack/lib/action_dispatch/routing.rb')
| -rw-r--r-- | actionpack/lib/action_dispatch/routing.rb | 9 |
1 files changed, 0 insertions, 9 deletions
diff --git a/actionpack/lib/action_dispatch/routing.rb b/actionpack/lib/action_dispatch/routing.rb index 60d4789a63..87dd1eba38 100644 --- a/actionpack/lib/action_dispatch/routing.rb +++ b/actionpack/lib/action_dispatch/routing.rb @@ -254,14 +254,5 @@ module ActionDispatch SEPARATORS = %w( / . ? ) #:nodoc: HTTP_METHODS = [:get, :head, :post, :patch, :put, :delete, :options] #:nodoc: - - #:stopdoc: - INSECURE_URL_PARAMETERS_MESSAGE = <<-MSG.squish - Attempting to generate a URL from non-sanitized request parameters! - - An attacker can inject malicious data into the generated URL, such as - changing the host. Whitelist and sanitize passed parameters to be secure. - MSG - #:startdoc: end end |