From 9f07782161af3255a929533f81e5efceefe0dc4d Mon Sep 17 00:00:00 2001 From: Guillermo Iguaran Date: Wed, 19 Sep 2012 10:02:54 -0500 Subject: Set AC::Parameters.permit_all_parameters explicitly to false when config.action_controller.permit_all_parameters is not present --- actionpack/lib/action_controller/railtie.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actionpack/lib/action_controller/railtie.rb b/actionpack/lib/action_controller/railtie.rb index d7e8194bf6..f2c68432c1 100644 --- a/actionpack/lib/action_controller/railtie.rb +++ b/actionpack/lib/action_controller/railtie.rb @@ -20,7 +20,7 @@ module ActionController end initializer "action_controller.parameters_config" do |app| - ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) + ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) { false } end initializer "action_controller.set_configs" do |app| -- cgit v1.2.3