Use #safe_attributes= instead.

git-svn-id: http://svn.redmine.org/redmine/trunk@16590 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb
index 177fdeb3855df786d348a2df864963e272a79f2f..3bb1496fb25fedc0e10bf478ff21658e2574be58 100644 (file)
--- a/app/controllers/issues_controller.rb
+++ b/app/controllers/issues_controller.rb
@@ -550,7 +550,7 @@ class IssuesController < ApplicationController
         time_entry.issue = @issue
         time_entry.user = User.current
         time_entry.spent_on = User.current.today
-        time_entry.attributes = params[:time_entry]
+        time_entry.safe_attributes = params[:time_entry]
         @issue.time_entries << time_entry
       end