6520ea5f7e
Allowing :controller and :action values to be specified via the path in config/routes.rb has been an underlying cause of a number of issues in Rails that have resulted in security releases. In light of this it's better that controllers and actions are explicitly whitelisted rather than trying to blacklist or sanitize 'bad' values. |
||
|---|---|---|
| .. | ||
| gtg | ||
| nfa | ||
| nodes | ||
| path | ||
| route/definition | ||
| router | ||
| route_test.rb | ||
| router_test.rb | ||
| routes_test.rb | ||