Docker/Maybe
Docker/Maybe
1
0
Fork 0
mirror of https://github.com/maybe-finance/maybe.git synced 2025-07-24 07:39:39 +02:00
Code Issues Releases Activity Actions 1

Fix account param safety

Browse source
This commit is contained in:
Rob Zolkos 2024-02-02 16:54:15 +00:00
parent 253ae29da0
commit 9aa9f99810
3 changed files with 11 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

8
app/controllers/accounts_controller.rb
View file

@ -33,8 +33,12 @@ class AccountsController < ApplicationController
end
def account_type_class
params[:type].constantize
rescue
valid_account_types = %w[Checking CreditCard]
if params[:type].present? && valid_account_types.include?(params[:type])
params[:type].constantizes
else
Account # Default to Account if type is not provided or invalid
end
end
end

6
config/routes.rb
View file

@ -6,9 +6,9 @@ Rails.application.routes.draw do
resources :accounts
scope 'accounts/new' do
scope 'bank' do
get '', to: 'accounts#new_bank', as: 'new_bank'
scope "accounts/new" do
scope "bank" do
get "", to: "accounts#new_bank", as: "new_bank"
end
end