From: Jean-Philippe Lang Date: Thu, 1 Jun 2017 19:56:13 +0000 (+0000) Subject: Use #safe_attributes= instead. X-Git-Tag: 3.4.0~98 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=dd92a53b14660bb3db6ca03ffe778cd18b0dbf1e;p=redmine.git Use #safe_attributes= instead. git-svn-id: http://svn.redmine.org/redmine/trunk@16590 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb index 177fdeb38..3bb1496fb 100644 --- a/app/controllers/issues_controller.rb +++ b/app/controllers/issues_controller.rb @@ -550,7 +550,7 @@ class IssuesController < ApplicationController time_entry.issue = @issue time_entry.user = User.current time_entry.spent_on = User.current.today - time_entry.attributes = params[:time_entry] + time_entry.safe_attributes = params[:time_entry] @issue.time_entries << time_entry end