Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 6fd139a1dbc2dfff9cbce7f6555c4c63e11f6a65 https://github.com/openSUSE/open-build-service/commit/6fd139a1dbc2dfff9cbce7... Author: Adrian Schröter <adrian@suse.de> Date: 2012-03-09 (Fri, 09 Mar 2012) Changed paths: M src/api/app/controllers/application_controller.rb M src/api/config/environment.rb M src/api/test/functional/about_controller_test.rb Log Message: ----------- [api] mass-assignment is needed for xml object handover. Disallow hashed parameter values instead to ensure that we have no undetected leak yet.