Use strong params in profiles_controller

This commit is contained in:
James Fleming 2013-07-06 23:21:27 +02:00 committed by Jonne Haß
parent d6ba6d1b02
commit 94e9fc5ac4

View file

@ -33,7 +33,7 @@ class ProfilesController < ApplicationController
def update
# upload and set new profile photo
@profile_attrs = params[:profile] || {}
@profile_attrs = params.require(:profile).permit(:first_name, :last_name, :gender, :bio, :location, :searchable, :tag_string, :nsfw, :date => [:year, :month, :day]) || {}
munge_tag_string