[obs-commits] [openSUSE/open-build-service] 6fd139: [api] mass-assignment is needed for xml object han...

9 Mar 2012


      Branch: refs/heads/master
  Home:   https://github.com/openSUSE/open-build-service
  Commit: 6fd139a1dbc2dfff9cbce7f6555c4c63e11f6a65
      https://github.com/openSUSE/open-build-service/commit/6fd139a1dbc2dfff9cbce7...
  Author: Adrian Schröter <adrian@suse.de>
  Date:   2012-03-09 (Fri, 09 Mar 2012)

  Changed paths:
    M src/api/app/controllers/application_controller.rb
  M src/api/config/environment.rb
  M src/api/test/functional/about_controller_test.rb

  Log Message:
  -----------
  [api] mass-assignment is needed for xml object handover. Disallow hashed parameter values instead to ensure that we have no undetected leak yet.