From 888dda875bfa210c436aff946dff487c7a5304a3 Mon Sep 17 00:00:00 2001 From: bogdanvlviv Date: Fri, 20 Apr 2018 01:47:22 +0300 Subject: Add missing changelog entry https://github.com/rails/rails/pull/32593 was backported to `5-2-stable` but since 5.2.0 is released the changelog entry should be in Rails 6.0.0 too. [ci skip] --- actionpack/CHANGELOG.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'actionpack') diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index a370c3fc99..e51b19b6d0 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,3 +1,15 @@ +* Fix strong parameters `permit!` with nested arrays. + + Given: + ``` + params = ActionController::Parameters.new(nested_arrays: [[{ x: 2, y: 3 }, { x: 21, y: 42 }]]) + params.permit! + ``` + + `params[:nested_arrays][0][0].permitted?` will now return `true` instead of `false`. + + *Steve Hull* + * Output only one Content-Security-Policy nonce header value per request. Fixes #32597. -- cgit v1.2.3