Pranav
86da3f7c06
fix: Remove account_id from params since it is not used (#13116)
account_id was permitted in strong parameters, allowing authenticated
admins to transfer resources (Portals, Automation Rules, Macros) to
arbitrary accounts.
Fix: Removed account_id from permitted params in 4 controllers:
- portals_controller.rb
- automation_rules_controller.rb
- macros_controller.rb
- twilio_channels_controller.rb
2025-12-19 17:07:53 -08:00
..
2025-07-24 12:56:39 +04:00
2025-06-17 15:45:40 -07:00
2025-12-15 17:24:45 -08:00
2025-03-13 17:46:48 -07:00
2025-12-19 17:07:53 -08:00
2025-09-23 20:14:02 +05:30
2025-01-14 16:15:47 -08:00
2023-12-08 14:13:35 -08:00
2025-04-28 14:13:56 -07:00
2025-09-22 17:52:56 +05:30
2025-12-17 07:54:50 -08:00
2025-12-19 12:41:33 -08:00
2025-12-17 07:54:50 -08:00
2025-11-18 18:20:58 -08:00
2025-11-10 20:47:18 +05:30
2025-12-17 07:54:50 -08:00
2025-12-17 07:54:50 -08:00
2025-12-02 17:53:44 -08:00
2025-12-08 22:04:30 +05:30
2025-12-17 07:54:50 -08:00
2025-12-18 14:22:54 +05:30