New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[#30] Use message_verifier to prevent html from tampering #40

Merged

itmammoth merged 1 commit into master from use_message_verifier

Aug 11, 2019

Owner

itmammoth commented Jul 24, 2019 •

edited

Loading

A solution to #30 .
Using Rails.application.message_verifier to encode the rails_sortable parameter so that it prevents html from tampering.


[#30] Use message_verifier to prevent html from tampering

e49052c

itmammoth mentioned this pull request

Security issue. There is no way to authorize the sortable resources. #30

Closed

itmammoth merged commit 9dde872 into master

itmammoth deleted the use_message_verifier branch

March 12, 2022 08:28

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment