jamesfredley opened a new pull request, #15808: URL: https://github.com/apache/grails-core/pull/15808
## Summary - add secureBindData APIs that require explicit allowed parameter lists before binding - validate controller calls at compile time so domains and command objects are not exposed to mass-assignment or parameter injection by accident - support indexed, nested, typed map, collection, request body, and prefix-filter binding scenarios - support nullMissing so allowed fields missing from the request can be cleared intentionally ## Verification - ./gradlew --no-daemon :grails-controllers:test --tests "org.grails.compiler.web.ControllerActionTransformerCompilationErrorsSpec" --rerun-tasks -PmaxTestParallel=1 - ./gradlew --no-daemon :grails-test-suite-web:test --tests "org.grails.web.servlet.BindDataMethodTests" --rerun-tasks -PmaxTestParallel=1 - Codex review of PR diff against origin/8.0.x: GREEN -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
