dinislage/redmine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prevent mass-assignment when adding/updating an issue category (#10390).

Browse Source 
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@9131 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang
2012-03-06 18:59:32 +00:00
parent 809d35d34b
commit 460239d1f9
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/issue_categories_controller.rb
+6 -3
View File
@@ -39,11 +39,13 @@ class IssueCategoriesController < ApplicationController
end
def new
@category = @project.issue_categories.build(params[:issue_category])
@category = @project.issue_categories.build
@category.safe_attributes = params[:issue_category]
end
def create
@category = @project.issue_categories.build(params[:issue_category])
@category = @project.issue_categories.build
@category.safe_attributes = params[:issue_category]
if @category.save
respond_to do |format|
format.html do
@@ -73,7 +75,8 @@ class IssueCategoriesController < ApplicationController
end
def update
if @category.update_attributes(params[:issue_category])
@category.safe_attributes = params[:issue_category]
if @category.save
respond_to do |format|
format.html {
flash[:notice] = l(:notice_successful_update)