Pranav
86da3f7c06
fix: Remove account_id from params since it is not used (#13116)
account_id was permitted in strong parameters, allowing authenticated
admins to transfer resources (Portals, Automation Rules, Macros) to
arbitrary accounts.
Fix: Removed account_id from permitted params in 4 controllers:
- portals_controller.rb
- automation_rules_controller.rb
- macros_controller.rb
- twilio_channels_controller.rb
2025-12-19 17:07:53 -08:00
..
2025-12-19 17:07:53 -08:00
2023-09-29 19:35:56 +05:30
2025-09-18 20:19:24 +05:30
2025-11-17 14:03:08 -08:00
2025-12-16 14:43:15 +05:30
2022-09-27 12:36:57 -07:00
2025-05-29 14:42:13 +05:30
2022-05-09 14:23:19 +05:30