More params protection

nanaya · Aug 16, 2016 · 00ce62a · 00ce62a
1 parent 32404fc
commit 00ce62a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/views/history/index.html.erb b/app/views/history/index.html.erb
@@ -3,7 +3,7 @@
   <div style="margin-bottom: 1em;">
     <ul class="history-header">
       <% if @type == "all" || @type == "posts" %>
-        <li>» <%= link_to @options[:show_all_tags]? t('.show.all') : t('.show.changed'), params.merge({:show_all_tags=>@options[:show_all_tags]? 0:1}) %></li>
+        <li>» <%= link_to @options[:show_all_tags]? t('.show.all') : t('.show.changed'), :show_all_tags=> (@options[:show_all_tags] ? 0 : 1) %></li>
       <% end %>
 
       <%# If we're searching for a specific object, omit the id/name column and