diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2012-02-05 12:21:21 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2012-02-05 12:21:21 +0000 |
| commit | f52f18c2814b0bf71a719e17f2338a43966cfcb8 (patch) | |
| tree | 41d6cf9cfca26109f681be6c611f0793a5698566 /app | |
| parent | 4128a8bfd01e98d378d353374686029ad748d34d (diff) | |
| download | redmine-f52f18c2814b0bf71a719e17f2338a43966cfcb8.tar.gz redmine-f52f18c2814b0bf71a719e17f2338a43966cfcb8.zip | |
Removed unsafe attributes assignment.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@8784 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app')
| -rw-r--r-- | app/controllers/account_controller.rb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb index 378024c33..6729b4702 100644 --- a/app/controllers/account_controller.rb +++ b/app/controllers/account_controller.rb @@ -81,7 +81,8 @@ class AccountController < ApplicationController session[:auth_source_registration] = nil @user = User.new(:language => Setting.default_language) else - @user = User.new(params[:user]) + @user = User.new + @user.safe_attributes = params[:user] @user.admin = false @user.register if session[:auth_source_registration] |