[verified] privacy: filter dashboard config allowlist

2026-08-16 00:06:18 +07:00
parent a96b9773c7
commit ced77afaf2
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/dashboard_controller.rb
+++ b/app/controllers/dashboard_controller.rb
@@ -46,7 +46,7 @@ class DashboardController < ActionController::Base
  end

  def set_global_config
-    @global_config = GlobalConfig.get(*GLOBAL_CONFIG_KEYS).merge(app_config)
+    @global_config = GlobalConfig.get(*GLOBAL_CONFIG_KEYS).slice(*GLOBAL_CONFIG_KEYS).merge(app_config)
  end

  def set_dashboard_scripts