Loading
Resolve Rails/StrongParams TODOs for admin/dashboard/explore controllers
Problem
Several top-level, admin, dashboard and explore controllers read request params directly (params[:x], params.merge, in-place params[...] =), bypassing StrongParameters
Re: Resolve StrongParams rubocop TODOs for admin, d... (#602236 - closed)
Changes
Replaced direct params access with scoped params.permit(...) across:
acme_challenges_controller.rbbanzai/uploads_controller.rbchaos_controller.rbexternal_redirect/external_redirect_controller.rbhealth_controller.rbhelp_controller.rbide_controller.rbinvites_controller.rbjwt_controller.rbgoogle_api/authorizations_controller.rbexplore/catalog_controller.rbdashboard/snippets_controller.rbdashboard_controller.rbdashboard/projects_controller.rbexplore/projects_controller.rbmailgun/webhooks_controller.rbadmin/application_settings_controller.rbgraphql_controller.rb
Removed the 18 fixed files from .rubocop_todo/rails/strong_params.yml.
Closes: #602236 (closed)
Edited by Jennifer Li