350e26b8a6
This commits replaces `params` with `safe_params` in `url_for` helpers to resolve security issues [1] and failing specs with the ``` ArgumentError: Attempting to generate a URL from non-sanitized request parameters! An attacker can inject malicious data into the generated URL, such as changing the host. Whitelist and sanitize passed parameters to be secure. ``` error. [1]: https://gitlab.com/gitlab-org/gitlab-ce/issues/45168 |
||
---|---|---|
.. | ||
settings | ||
application_controller.rb | ||
avatars_controller.rb | ||
boards_controller.rb | ||
children_controller.rb | ||
group_members_controller.rb | ||
labels_controller.rb | ||
milestones_controller.rb | ||
uploads_controller.rb | ||
variables_controller.rb |