diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2016-07-17 06:43:12 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2016-07-17 06:43:12 +0000 |
| commit | 43d8ab8288e1d1f561d3fc530472ddb0042db5fe (patch) | |
| tree | 9751cafb90b684cf955174b46e3514dc4efd8bd1 /app/controllers/account_controller.rb | |
| parent | cad0036297bdecc13bcd5cb66f439081ca2bae9f (diff) | |
| download | redmine-43d8ab8288e1d1f561d3fc530472ddb0042db5fe.tar.gz redmine-43d8ab8288e1d1f561d3fc530472ddb0042db5fe.zip | |
Use safe_attributes for user preferences.
git-svn-id: http://svn.redmine.org/redmine/trunk@15688 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/controllers/account_controller.rb')
| -rw-r--r-- | app/controllers/account_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb index 9f4aff85e..0dc1e9811 100644 --- a/app/controllers/account_controller.rb +++ b/app/controllers/account_controller.rb @@ -123,7 +123,7 @@ class AccountController < ApplicationController user_params = params[:user] || {} @user = User.new @user.safe_attributes = user_params - @user.pref.attributes = params[:pref] if params[:pref] + @user.pref.safe_attributes = params[:pref] @user.admin = false @user.register if session[:auth_source_registration] |