From f52f18c2814b0bf71a719e17f2338a43966cfcb8 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Sun, 5 Feb 2012 12:21:21 +0000 Subject: [PATCH] Removed unsafe attributes assignment. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@8784 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/controllers/account_controller.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb index 378024c33..6729b4702 100644 --- a/app/controllers/account_controller.rb +++ b/app/controllers/account_controller.rb @@ -81,7 +81,8 @@ class AccountController < ApplicationController session[:auth_source_registration] = nil @user = User.new(:language => Setting.default_language) else - @user = User.new(params[:user]) + @user = User.new + @user.safe_attributes = params[:user] @user.admin = false @user.register if session[:auth_source_registration]