From 8559a900641806b54a78737679060099e34b2baa Mon Sep 17 00:00:00 2001 From: andrew brown Date: Sun, 9 Apr 2017 12:41:23 -0700 Subject: Use the hashie-forbideen_attributes gem This gem prevents Mash from responding to :permitted?, disabling mass assignment protection for the Grape API --- Gemfile.lock | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'Gemfile.lock') diff --git a/Gemfile.lock b/Gemfile.lock index d7e3f7343d0..bb91db1e805 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -346,6 +346,8 @@ GEM tilt hashdiff (0.3.2) hashie (3.5.5) + hashie-forbidden_attributes (0.1.1) + hashie (>= 3.0) health_check (2.6.0) rails (>= 4.0) hipchat (1.5.2) @@ -915,6 +917,7 @@ DEPENDENCIES grape-entity (~> 0.6.0) haml_lint (~> 0.21.0) hamlit (~> 2.6.1) + hashie-forbidden_attributes health_check (~> 2.6.0) hipchat (~> 1.5.0) html-pipeline (~> 1.11.0) @@ -1035,4 +1038,4 @@ DEPENDENCIES wikicloth (= 0.8.1) BUNDLED WITH - 1.14.5 + 1.14.6 -- cgit v1.2.3