diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2016-07-17 06:43:12 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2016-07-17 06:43:12 +0000 |
| commit | 43d8ab8288e1d1f561d3fc530472ddb0042db5fe (patch) | |
| tree | 9751cafb90b684cf955174b46e3514dc4efd8bd1 /app/controllers/users_controller.rb | |
| parent | cad0036297bdecc13bcd5cb66f439081ca2bae9f (diff) | |
| download | redmine-43d8ab8288e1d1f561d3fc530472ddb0042db5fe.tar.gz redmine-43d8ab8288e1d1f561d3fc530472ddb0042db5fe.zip | |
Use safe_attributes for user preferences.
git-svn-id: http://svn.redmine.org/redmine/trunk@15688 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/controllers/users_controller.rb')
| -rw-r--r-- | app/controllers/users_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index f9632fe6b..bf8152b99 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -90,7 +90,7 @@ class UsersController < ApplicationController @user = User.new(:language => Setting.default_language, :mail_notification => Setting.default_notification_option, :admin => false) @user.safe_attributes = params[:user] @user.password, @user.password_confirmation = params[:user][:password], params[:user][:password_confirmation] unless @user.auth_source_id - @user.pref.attributes = params[:pref] if params[:pref] + @user.pref.safe_attributes = params[:pref] if @user.save Mailer.account_information(@user, @user.password).deliver if params[:send_information] |