Fix search and tracker listing

linuxfrorg · Jun 25, 2018 · b2dc2d3 · b2dc2d3 · gle42 · Jun 26, 2018
1 parent 83454e1
commit b2dc2d3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/app/controllers/search_controller.rb b/app/controllers/search_controller.rb
@@ -1,6 +1,7 @@
 class SearchController < ApplicationController
 
   def index
+    params.permit!
     redirect_to "https://duckduckgo.com/?#{params.slice(:q).to_query}+site%3Alinuxfr.org"
   end
 

diff --git a/app/controllers/trackers_controller.rb b/app/controllers/trackers_controller.rb
@@ -7,7 +7,8 @@ class TrackersController < ApplicationController
   respond_to :html, :md
 
   def index
-    @attrs    = {"state" => "opened"}.merge(params[:tracker] || {})
+    @attrs    = params.require(:tracker).permit(:state, :category_id, :assigned_to_user_id)
+    @attrs    = {"state" => "opened"}.merge @attrs
     @order    = params[:order]
     @order    = "created_at" unless VALID_ORDERS.include?(@order)
     @trackers = Tracker.joins(:node).merge(Node.visible)