From e77d9aba7b452441ce8e785c65dbf5e03f08d5ab Mon Sep 17 00:00:00 2001
From: Luis Ramos <luisramos0@gmail.com>
Date: Wed, 13 May 2020 12:12:32 +0100
Subject: [PATCH] Add missing strong params to less important controllers not
 tested in specs

---
 app/controllers/spree/admin/countries_controller.rb          | 5 +++++
 .../spree/admin/return_authorizations_controller.rb          | 5 +++++
 .../spree/admin/shipping_categories_controller.rb            | 4 ++++
 3 files changed, 14 insertions(+)

diff --git a/app/controllers/spree/admin/countries_controller.rb b/app/controllers/spree/admin/countries_controller.rb
index 4314e54b37..f6a90bf567 100644
--- a/app/controllers/spree/admin/countries_controller.rb
+++ b/app/controllers/spree/admin/countries_controller.rb
@@ -1,6 +1,11 @@
 module Spree
   module Admin
     class CountriesController < ResourceController
+      def permitted_resource_params
+        params.require(:country).
+          permit(:name, :iso_name, :states_required)
+      end
+
       def collection
         super.order(:name)
       end
diff --git a/app/controllers/spree/admin/return_authorizations_controller.rb b/app/controllers/spree/admin/return_authorizations_controller.rb
index 9696835315..0411cd5b1b 100644
--- a/app/controllers/spree/admin/return_authorizations_controller.rb
+++ b/app/controllers/spree/admin/return_authorizations_controller.rb
@@ -19,6 +19,11 @@ module Spree
           @return_authorization.add_variant(variant_id.to_i, qty.to_i)
         end
       end
+
+      def permitted_resource_params
+        params.require(:return_authorization).
+          permit(:amount, :reason, :stock_location_id)
+      end
     end
   end
 end
diff --git a/app/controllers/spree/admin/shipping_categories_controller.rb b/app/controllers/spree/admin/shipping_categories_controller.rb
index e9d1677027..7fa77bcc9c 100644
--- a/app/controllers/spree/admin/shipping_categories_controller.rb
+++ b/app/controllers/spree/admin/shipping_categories_controller.rb
@@ -1,6 +1,10 @@
 module Spree
   module Admin
     class ShippingCategoriesController < ResourceController
+      def permitted_resource_params
+        params.require(:shipping_category).
+          permit(:name, :temperature_controlled)
+      end
     end
   end
 end