Ian Christian Myers 0d01c33482 Enabled strong_parameters across all models/controllers. ... All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that. The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method. It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments.		2013-06-06 00:30:59 -07:00
..
admin_controller.rb	:s/moderator?/staff/g ... our naming was kind of crazy, renamed moderator? to staff	2013-05-02 17:22:27 +10:00
api_controller.rb	basic api support	2013-03-25 18:04:46 -07:00
dashboard_controller.rb	Expire dashboard data when you upgrade to a new discourse version. Version check data was being cached and causing confusion to people who upgraded.	2013-05-14 16:17:25 -04:00
email_controller.rb	Better HTML emails, smarter email digests, new email section in admin with digest preview	2013-06-05 17:47:25 -04:00
export_controller.rb	extract hard-coded strings	2013-04-07 18:14:50 +02:00
flags_controller.rb	Reduced complexity of admin flags controller, split up into methods, moved reports into model.	2013-05-29 16:49:34 -04:00
groups_controller.rb	more group progress, UI getting there, controller mostly done	2013-05-09 17:37:34 +10:00
impersonate_controller.rb	Enabled strong_parameters across all models/controllers.	2013-06-06 00:30:59 -07:00
reports_controller.rb	Code to support EmberJS + Discourse Tutorial feature: Admin Reports	2013-02-27 22:40:36 -05:00
site_content_types_controller.rb	Work in Progress: Content Editing in Admin Section	2013-04-04 17:26:22 -04:00
site_contents_controller.rb	Work in Progress: Content Editing in Admin Section	2013-04-04 17:26:22 -04:00
site_customizations_controller.rb	Enabled strong_parameters across all models/controllers.	2013-06-06 00:30:59 -07:00
site_settings_controller.rb	Enabled strong_parameters across all models/controllers.	2013-06-06 00:30:59 -07:00
users_controller.rb	Add a count of blocked users on the dashboard	2013-06-04 11:53:19 -04:00
versions_controller.rb	Add version checking that shows on the admin dashboard	2013-02-19 15:20:49 -05:00