This is not just param extraction, we sanitize too

2025-04-06 13:29:43 +02:00
parent 5e78a1dab1
commit b8bcfdee40
1 changed files with 2 additions and 2 deletions
@@ -6,11 +6,11 @@ class Bubbles::TaggingsController < ApplicationController
  end

  def create
-    @bubble.toggle_tag_with(tag_title_param)
+    @bubble.toggle_tag_with(sanitized_tag_title_param)
  end

  private
-    def tag_title_param
+    def sanitized_tag_title_param
      params.required(:tag_title).strip.gsub(/\A#/, "")
    end
 end