diff options
| author | bogdanvlviv <bogdanvlviv@gmail.com> | 2018-04-20 01:47:22 +0300 |
|---|---|---|
| committer | bogdanvlviv <bogdanvlviv@gmail.com> | 2018-04-20 01:50:30 +0300 |
| commit | 888dda875bfa210c436aff946dff487c7a5304a3 (patch) | |
| tree | e5821b5ff75baecf38f54dc71fb611cc584ee1f0 /actionpack | |
| parent | d26f48a57453844ad81503fe71ba24a1d2a1a1b7 (diff) | |
| download | rails-888dda875bfa210c436aff946dff487c7a5304a3.tar.gz rails-888dda875bfa210c436aff946dff487c7a5304a3.tar.bz2 rails-888dda875bfa210c436aff946dff487c7a5304a3.zip | |
Add missing changelog entry
https://github.com/rails/rails/pull/32593 was backported to
`5-2-stable` but since 5.2.0 is released the changelog entry should
be in Rails 6.0.0 too.
[ci skip]
Diffstat (limited to 'actionpack')
| -rw-r--r-- | actionpack/CHANGELOG.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index a370c3fc99..e51b19b6d0 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,3 +1,15 @@ +* Fix strong parameters `permit!` with nested arrays. + + Given: + ``` + params = ActionController::Parameters.new(nested_arrays: [[{ x: 2, y: 3 }, { x: 21, y: 42 }]]) + params.permit! + ``` + + `params[:nested_arrays][0][0].permitted?` will now return `true` instead of `false`. + + *Steve Hull* + * Output only one Content-Security-Policy nonce header value per request. Fixes #32597. |