{"push_id":1337900996,"size":1,"distinct_size":0,"ref":"refs/heads/fix/move-params-mangling-to-controller","head":"a0e0a11bdfe12fd716a091e9eb88086fb42c4762","before":"c2deae4b16563cc45c72f30170ed916608b2e80f","commits":[{"sha":"a0e0a11bdfe12fd716a091e9eb88086fb42c4762","author":{"name":"Markus Schirp","email":"f168253609b03ba422726bbf0decfc8e930a000f@schirp-dso.com"},"message":"Fix strictness of permitted attributes\n\n* Fixes cases where the use and permission of permitted attributes is\n  not strict enough\n* The previous implementation pattern to define permitted attributes\n  globally and inherit the global definition into per use case extensions\n  created these strictness problems. Hence remove the global mechanism and\n  port them to local definitions that can be much closer aligned with the\n  use case.\n* This was triggered by the finding that permitted_orders_attributes\n  which is only used for cart population let through all checkout\n  attributes.","distinct":false,"url":"https://api.github.com/repos/MountainRoseHerbs/spree/commits/a0e0a11bdfe12fd716a091e9eb88086fb42c4762"}]}
{"actor":{"display_login":"mbj"}}