gregschmit / rails-rest-framework / 30734658920

95%

push

github

Filter read-only fields before building strong params

get_allowed_parameters now iterates writable_fields (get_fields minus
read_only) instead of stripping read-only keys afterward. This closes a
gap where a read_only association still expanded to permitted
_id/_attributes keys that the name-based strip couldn't catch. Removes
_rrf_strip_read_only_fields; bulk update still re-permits the pk.

4 of 4 new or added lines in 1 file covered. (100.0%)

1312 of 1383 relevant lines covered (94.87%)

480.31 hits per line