Bug #30993: HRT endpoint enables owner in strong params definition - Foreman

Actions

Bug #30993

closed

HRT endpoint enables owner in strong params definition

Added by Marek Hulán over 4 years ago. Updated about 4 years ago.

Status:

Closed

Priority:

Normal

Assignee:

-

Category:

Host registration

Target version:

-

Difficulty:

Triaged:

No

Bugzilla link:

Pull request:

https://github.com/theforeman/foreman/pull/8049

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

While it does no harm, the strong params whitelist contains the owner https://github.com/theforeman/foreman/pull/8018/files/71f59ba79a611232ea93ae32847b3d159125dba5#diff-df936dd14181cb268280386173da4a5aR25

Only owner_id and owner_type are harfmul, however this should not be allowed anyway.

Related issues 1 (0 open — 1 closed)

Actions

#1

Updated by Marek Hulán over 4 years ago

Related to Feature #30440: Simple & automatic host registration WF added

Actions

#2

Updated by The Foreman Bot over 4 years ago

Status changed from New to Ready For Testing
Pull request https://github.com/theforeman/foreman/pull/8049 added

Actions

#3

Updated by The Foreman Bot over 4 years ago

Fixed in Releases 2.3.0 added

Actions

#4

Updated by Leos Stejskal over 4 years ago

Status changed from Ready For Testing to Closed

Applied in changeset foreman|4e66ddb27967dc1e0ed82aebb93f875ca63cb7fe.

Actions

#5

Updated by Tomer Brisker about 4 years ago

Category set to Host registration

Actions

Also available in: Atom PDF