Define permitted parameters

dxw · Dec 12, 2024 · 7cf95dd · 7cf95dd
1 parent ced8837
commit 7cf95dd
Showing 1 changed file with 21 additions and 1 deletion.
diff --git a/app/controllers/subscriptions_controller.rb b/app/controllers/subscriptions_controller.rb
@@ -100,7 +100,27 @@ def load_step
   end
 
   def subscription_params
-    params[:subscription_form].permit! # .permit(:email, :sms_number, :voice_number, :zone, :time)
+    params[:subscription_form].permit(
+      :current_step,
+      :receive_email,
+      :receive_sms,
+      :receive_voice,
+      :email,
+      :sms_number,
+      :voice_number,
+      :verification_code_email,
+      :verification_code_sms_number,
+      :verification_code_voice_number,
+      :zone_search,
+      :time,
+      :reason,
+      :source,
+      :research,
+      :terms,
+      :privacy,
+      zones: []
+    )
+  end
 
   def redirect_to_finish_wizard(options = {}, params = {})
     redirect_to forecast_path, notice: "You have successfully subscribed to air pollution alerts"