🖥

#Rails / found unpermitted parameter / e.g ignore GET request RequestB

に公開

Controller example

use :except
not :permit

class UserController < ApplicationController
  def index
    permitted_params = params.except(:foo).permit(:page)

    ...
  end
end

How to test

Maybe Rspec does not support invalid Get with RequestBody method

Original by Github issue

https://github.com/YumaInaura/YumaInaura/issues/3074

チャットメンバー募集

何か質問、悩み事、相談などあればLINEオープンチャットもご利用ください。

https://line.me/ti/g2/eEPltQ6Tzh3pYAZV8JXKZqc7PJ6L0rpm573dcQ

Twitter

https://twitter.com/YumaInaura

公開日時

2020-04-15

Discussion