You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Files controller is not vetting incoming parameters. They are accessed throughout the file using params[:my_param]. This raises a some security concerns.
Acceptance Criteria:
Creates an action specific strong parameter method for each action:
def my_action_params
params.permit(:id, :path, :etc)
end
Removes all instances of params[:blah_blah]
Loads params into the appropriate variable type for its use case (instance, local, etc)
Passes variables into shared methods
The text was updated successfully, but these errors were encountered:
The Files controller is not vetting incoming parameters. They are accessed throughout the file using
params[:my_param]
. This raises a some security concerns.Acceptance Criteria:
params[:blah_blah]
The text was updated successfully, but these errors were encountered: