Bug #30993: HRT endpoint enables owner in strong params definition - Foreman

Actions

Bug #30993

closed

HRT endpoint enables owner in strong params definition

Added by Marek Hulán over 4 years ago. Updated about 4 years ago.

Status:

Closed

Priority:

Normal

Assignee:

-

Category:

Host registration

Target version:

-

Difficulty:

Triaged:

No

Bugzilla link:

Pull request:

https://github.com/theforeman/foreman/pull/8049

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

While it does no harm, the strong params whitelist contains the owner https://github.com/theforeman/foreman/pull/8018/files/71f59ba79a611232ea93ae32847b3d159125dba5#diff-df936dd14181cb268280386173da4a5aR25

Only owner_id and owner_type are harfmul, however this should not be allowed anyway.

Related issues 1 (0 open — 1 closed)

Actions

Also available in: Atom PDF