lundi 15 février 2016

How should I protect from a rails controller param

I have the following call in he controller

@value = object_params[:new_plan]
@special_value = the_hash[@new_plan]

Where object_params is

def object_params
     params.permit(:new_plan,:feedback)
end

My question is should I do anything to object_params[:new_plan] and the fact that the value is used in a call after that. What should I protect from?

Aucun commentaire:

Enregistrer un commentaire