350e26b8a6
This commits replaces `params` with `safe_params` in `url_for` helpers to resolve security issues [1] and failing specs with the ``` ArgumentError: Attempting to generate a URL from non-sanitized request parameters! An attacker can inject malicious data into the generated URL, such as changing the host. Whitelist and sanitize passed parameters to be secure. ``` error. [1]: https://gitlab.com/gitlab-org/gitlab-ce/issues/45168 |
||
|---|---|---|
| .. | ||
| settings | ||
| application_controller.rb | ||
| avatars_controller.rb | ||
| boards_controller.rb | ||
| children_controller.rb | ||
| group_members_controller.rb | ||
| labels_controller.rb | ||
| milestones_controller.rb | ||
| uploads_controller.rb | ||
| variables_controller.rb | ||