Use #safe_attributes= instead.

git-svn-id: http://svn.redmine.org/redmine/trunk@16590 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/controllers/issues_controller.rb

@@ -550,7 +550,7 @@ class IssuesController < ApplicationController
         time_entry.issue = @issue
         time_entry.user = User.current
         time_entry.spent_on = User.current.today
-        time_entry.attributes = params[:time_entry]
+        time_entry.safe_attributes = params[:time_entry]
         @issue.time_entries << time_entry
       end