Merge pull request #7701 from guilleiguaran/set-permit-all-parameters…

…-explicitly Set AC::Parameters.permit_all_parameters explicitly to false when config.action_controller.permit_all_parameters is not present
rails · Sep 19, 2012 · 6cbec58 · 6cbec58
2 parents 69e0e3f + 9f07782
commit 6cbec58
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/actionpack/lib/action_controller/railtie.rb b/actionpack/lib/action_controller/railtie.rb
@@ -20,7 +20,7 @@ class Railtie < Rails::Railtie #:nodoc:
     end
 
     initializer "action_controller.parameters_config" do |app|
-      ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters)
+      ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) { false }
     end
 
     initializer "action_controller.set_configs" do |app|