This PR addresses several security vulnerabilities found in belts_controller.rb, specifically related to unscoped find(...) methods and redirects that use user input without sanitization.
Changes:
Ensured that find(...) methods are scoped to prevent Insecure Direct Object Reference (IDOR) vulnerabilities.
Sanitized user input used in redirects to prevent potential spoofing.
These changes enhance the security of the application by ensuring that user input is properly handled and that database queries are securely scoped.
This PR addresses several security vulnerabilities found in
belts_controller.rb, specifically related to unscopedfind(...)methods and redirects that use user input without sanitization.Changes:
find(...)methods are scoped to prevent Insecure Direct Object Reference (IDOR) vulnerabilities.These changes enhance the security of the application by ensuring that user input is properly handled and that database queries are securely scoped.