Prevent mass assignment vulnerability

10 years ago · f8b09545ed
parent e48649fded
commit f8b09545ed
1 changed files with 2 additions and 1 deletions
--- a/app/controllers/copy_projects_controller.rb
+++ b/app/controllers/copy_projects_controller.rb
@ -37,7 +37,8 @@ class CopyProjectsController < ApplicationController

  def copy
    target_project_name = params[:project][:name]
-    @copy_project = Project.new(params[:project])
+    @copy_project = Project.new
+    @copy_project.safe_attributes = params[:project]

    if @copy_project.valid?
      copy_project_job = CopyProjectJob.new(User.current,