only permit certain fields (#3710)

OSC · Aug 12, 2024 · eb4494e · eb4494e
1 parent 696cbed
commit eb4494e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/apps/myjobs/app/controllers/workflows_controller.rb b/apps/myjobs/app/controllers/workflows_controller.rb
@@ -217,7 +217,10 @@ def set_workflow
 
   # Only allow a trusted parameter "white list" through.
   def workflow_params
-    params.require(:workflow).permit!
+    params.require(:workflow).permit(
+      :name, :batch_host, :script_name, :staging_template_dir,
+      :account, :job_array_request, :copy_environment
+    )
   end
 
   def update_jobs