summaryrefslogtreecommitdiff
path: root/changelogs
diff options
context:
space:
mode:
authorandrew brown <aebrownz11@gmail.com>2017-04-09 12:41:23 -0700
committerandrew brown <aebrownz11@gmail.com>2017-04-09 12:56:46 -0700
commit8559a900641806b54a78737679060099e34b2baa (patch)
tree30b72c6f46d5da8b58bab11930a8e125a468f4e8 /changelogs
parent5e1a802b15af4ba991f9ed85a691f1a925cc0edf (diff)
downloadgitlab-ce-8559a900641806b54a78737679060099e34b2baa.tar.gz
Use the hashie-forbideen_attributes gem
This gem prevents Mash from responding to :permitted?, disabling mass assignment protection for the Grape API
Diffstat (limited to 'changelogs')
-rw-r--r--changelogs/unreleased/use-hashie-forbidden_attributes.yml4
1 files changed, 4 insertions, 0 deletions
diff --git a/changelogs/unreleased/use-hashie-forbidden_attributes.yml b/changelogs/unreleased/use-hashie-forbidden_attributes.yml
new file mode 100644
index 00000000000..4f429b03a0d
--- /dev/null
+++ b/changelogs/unreleased/use-hashie-forbidden_attributes.yml
@@ -0,0 +1,4 @@
+---
+title: Add hashie-forbidden_attributes gem
+merge_request: 10579
+author: Andy Brown