From a605fb0e9776b87e81d22a8ca52b633a5a7fa7ee Mon Sep 17 00:00:00 2001
From: Taico Aerts <t.v.aerts@tudelft.nl>
Date: Mon, 12 Sep 2022 23:21:16 +0200
Subject: [PATCH] Prevent updating of tag names
---
app/controllers/tags_controller.rb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/app/controllers/tags_controller.rb b/app/controllers/tags_controller.rb
index d8c4a206e..f1e6dac20 100644
--- a/app/controllers/tags_controller.rb
+++ b/app/controllers/tags_controller.rb
@@ -82,7 +82,7 @@ class TagsController < ApplicationController
return unless check_your_privilege('edit_tags', nil, true)
wiki_md = params[:tag][:wiki_markdown]
- if @tag.update(tag_params.merge(wiki: wiki_md.present? ? helpers.render_markdown(wiki_md) : nil))
+ if @tag.update(tag_params.merge(wiki: wiki_md.present? ? helpers.render_markdown(wiki_md) : nil).except(:name))
redirect_to tag_path(id: @category.id, tag_id: @tag.id)
else
render :edit, status: :bad_request
--
GitLab