Changeset 1261
- Timestamp:
- 01/10/08 09:43:35 (9 months ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
plugins/merb_param_protection/lib/merb_param_protection.rb
r1258 r1261 43 43 end 44 44 45 module ClassMethods 46 #before Proc.new {|c| 47 #args.keys.each {|obj| 48 #c.request.restrict_params(obj, args[obj]) 49 #} 50 #} 51 45 module ClassMethods 52 46 # Ensures these parameters are sent for the object 53 47 # … … 104 98 end 105 99 end 100 101 if protected_params_args.is_a?(Hash) 102 protected_params_args.keys.each do |obj| 103 self.request.remove_params_from_object(obj, protected_params_args[obj]) 104 end 105 end 106 106 end 107 107 end 108 108 109 #args.keys.each do |obj|110 #request.remove_params_from_object(obj, args[obj])111 #end112 109 end 113 110 … … 120 117 # 121 118 def remove_params_from_object(obj, attrs = []) 122 filtered = params 123 attrs.each {|a| filtered[obj].delete(a)} 124 @params = filtered 119 unless params[obj].nil? 120 filtered = params 121 attrs.each {|a| filtered[obj].delete(a)} 122 @params = filtered 123 end 125 124 end 126 125
