Call #permit on params object in before_filter

This commit is contained in:
Matt-Yorkley
2020-02-26 18:03:19 +01:00
parent 95996dc11e
commit eef1574ebe

View File

@@ -2,6 +2,7 @@ Spree::PaypalController.class_eval do
before_filter :enable_embedded_shopfront
before_filter :destroy_orphaned_paypal_payments, only: :confirm
after_filter :reset_order_when_complete, only: :confirm
before_filter :permit_parameters!
def cancel
flash[:notice] = Spree.t('flash.cancel', scope: 'paypal')
@@ -18,6 +19,10 @@ Spree::PaypalController.class_eval do
private
def permit_parameters!
params.permit(:token, :payment_method_id, :PayerID)
end
def reset_order_when_complete
if current_order.complete?
flash[:notice] = t(:order_processed_successfully)