Use safe_attributes for custom field enumerations.

git-svn-id: http://svn.redmine.org/redmine/trunk@15690 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang
2016-07-17 07:27:23 +00:00
parent 316eae078c
commit cf22053dd5
2 changed files with 17 additions and 3 deletions

View File

@@ -29,7 +29,8 @@ class CustomFieldEnumerationsController < ApplicationController
end
def create
@value = @custom_field.enumerations.build(params[:custom_field_enumeration])
@value = @custom_field.enumerations.build
@value.safe_attributes = params[:custom_field_enumeration]
@value.save
respond_to do |format|
format.html { redirect_to custom_field_enumerations_path(@custom_field) }
@@ -38,7 +39,10 @@ class CustomFieldEnumerationsController < ApplicationController
end
def update_each
if CustomFieldEnumeration.update_each(@custom_field, params[:custom_field_enumerations])
saved = CustomFieldEnumeration.update_each(@custom_field, params[:custom_field_enumerations]) do |enumeration, enumeration_attributes|
enumeration.safe_attributes = enumeration_attributes
end
if saved
flash[:notice] = l(:notice_successful_update)
end
redirect_to :action => 'index'