-
Sub-task
-
Resolution: Done
-
Major
-
None
-
False
-
None
-
False
-
Not Started
-
Not Started
-
Not Started
-
Not Started
-
Not Started
-
Not Started
-
-
-
API CCS Sprint 37 (3Scale), API CCS Sprint 38 (3Scale), API CCS Sprint 39 (3Scale), API CCS Sprint 40 (3Scale), API CCS Sprint 42 (3Scale), API CCS Sprint 43 (3Scale), API CCS Sprint 44 (3Scale) 2
Never allow users to send extra params through the API, and return an error if they try.
To make this straight and easy, better do https://issues.redhat.com/browse/THREESCALE-9079 first.
The PR: https://github.com/3scale/porta/pull/3296 contains some instructions on how to test this.
- is blocked by
-
THREESCALE-9079 CMS: Replace protected attributes by strong parameters
- Closed
- mentioned on