Do not accept user_id as parameter when creating annotations
This commit is contained in:
@@ -35,6 +35,6 @@ class AnnotationsController < ApplicationController
|
|||||||
params
|
params
|
||||||
.require(:annotation)
|
.require(:annotation)
|
||||||
.permit(:quote, :text, ranges: [:start, :startOffset, :end, :endOffset])
|
.permit(:quote, :text, ranges: [:start, :startOffset, :end, :endOffset])
|
||||||
.merge(legislation_id: params[:legislation_id], user_id: params[:user_id])
|
.merge(legislation_id: params[:legislation_id])
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
Reference in New Issue
Block a user