Closed GavinJoyce closed 11 years ago
We already have a whitelist:
options = overrides.reverse_merge( #overrides take precedence over params
:page => params[:page],
:includes => params[:includes].nil? ? [] : params[:includes].split(','),
:filters => self.extract_filters_from_params(params),
:sort_by => params[:sort_by],
:sort_direction => params[:sort_direction]
)
Valid parameters will be page, includes, allowed filter keys, allowed sort keys, sort direction