Skip to content
  • Josh Pencheon's avatar
    31aceeb1
    Fix bug: `ParameterFilter` should not add keys (#3431) (#4457) · 31aceeb1
    Josh Pencheon authored
    If called with a hash that has a `default` / `default_proc`
    configured, `Devise::ParameterFilter` can add in missing keys
    it was due to attempt to sanitise the values for.
    
    This patch prevents this from happening, whilst also clarifying
    the filtering intent of `ParamaterFilter`.
    
    (This can also occur if NilClass has been augmented with definitions
    for `strip` or `downcase`.)
    
    Fixes #3431.
    31aceeb1
    Fix bug: `ParameterFilter` should not add keys (#3431) (#4457)
    Josh Pencheon authored
    If called with a hash that has a `default` / `default_proc`
    configured, `Devise::ParameterFilter` can add in missing keys
    it was due to attempt to sanitise the values for.
    
    This patch prevents this from happening, whilst also clarifying
    the filtering intent of `ParamaterFilter`.
    
    (This can also occur if NilClass has been augmented with definitions
    for `strip` or `downcase`.)
    
    Fixes #3431.
Loading