Use expect for nested params in settings/* controllers (#33673)

2025-01-22 03:49:52 -05:00
parent 8b24085f8e
commit e155aab39e
16 changed files with 131 additions and 8 deletions
--- a/app/controllers/settings/profiles_controller.rb
+++ b/app/controllers/settings/profiles_controller.rb
@@ -20,7 +20,7 @@ class Settings::ProfilesController < Settings::BaseController
  private

  def account_params
-    params.require(:account).permit(:display_name, :note, :avatar, :header, :bot, fields_attributes: [:name, :value])
+    params.expect(account: [:display_name, :note, :avatar, :header, :bot, fields_attributes: [:name, :value]])
  end

  def set_account