github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-06 13:06:56 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Explicit param permit and assignment cleanup.

Browse Source
This commit is contained in:
Kevin Elliott
2018-03-23 09:59:31 -07:00
parent 58ec4d04c0
commit fa0868fc3f
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/controllers/topics_controller.rb
View File

@ -668,9 +668,10 @@ class TopicsController < ApplicationController
raise ActionController::ParameterMissing.new(:topic_ids) raise ActionController::ParameterMissing.new(:topic_ids)
end end
operation = params.require(:operation) operation = params
operation.permit! .require(:operation)
operation = operation.to_h.symbolize_keys .permit(:type, :group, :category_id, :notification_level_id, :tags)
.to_h.symbolize_keys
raise ActionController::ParameterMissing.new(:operation_type) if operation[:type].blank? raise ActionController::ParameterMissing.new(:operation_type) if operation[:type].blank?
operator = TopicsBulkAction.new(current_user, topic_ids, operation, group: operation[:group]) operator = TopicsBulkAction.new(current_user, topic_ids, operation, group: operation[:group])