aboutsummaryrefslogtreecommitdiffstats
path: root/guides
diff options
context:
space:
mode:
authorRafael Mendonça França <rafaelmfranca@gmail.com>2014-06-27 18:11:31 -0300
committerRafael Mendonça França <rafaelmfranca@gmail.com>2014-06-27 18:16:52 -0300
commitebdedaec32957d5dd81b15e0cf1b60d3f5ccbcb1 (patch)
treef247087c0de5d26adaefb5e109118d658735fc3e /guides
parent67d7dfd082ba395bca5d937d039f50965dfc03ab (diff)
parent58399e1dc3e40b0f6cf8f5da31d694267afdf328 (diff)
downloadrails-ebdedaec32957d5dd81b15e0cf1b60d3f5ccbcb1.tar.gz
rails-ebdedaec32957d5dd81b15e0cf1b60d3f5ccbcb1.tar.bz2
rails-ebdedaec32957d5dd81b15e0cf1b60d3f5ccbcb1.zip
Merge pull request #15933 from rafael/master
Add always permitted parameters as a configurable option. [Rafael Mendonça França + Gary S. Weaver]
Diffstat (limited to 'guides')
-rw-r--r--guides/source/configuring.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/guides/source/configuring.md b/guides/source/configuring.md
index 3d6b2f79c6..f74fbaa7c3 100644
--- a/guides/source/configuring.md
+++ b/guides/source/configuring.md
@@ -330,6 +330,8 @@ The schema dumper adds one additional configuration option:
* `config.action_controller.action_on_unpermitted_parameters` enables logging or raising an exception if parameters that are not explicitly permitted are found. Set to `:log` or `:raise` to enable. The default value is `:log` in development and test environments, and `false` in all other environments.
+* `config.action_controller.always_permitted_parameters` sets a list of whitelisted parameters that are permitted by default. The default values are `['controller', 'action']`.
+
### Configuring Action Dispatch
* `config.action_dispatch.session_store` sets the name of the store for session data. The default is `:cookie_store`; other valid options include `:active_record_store`, `:mem_cache_store` or the name of your own custom class.