discourse/discourse — pull request #979 by iancmyers (2013-06-07 08:04:34+00:00)
Title: All parameters for #create in PostsController pass through strong_parameters

All parameters for #create in PostsController pass through strong_parameters.

We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type.