From ced77afaf2495807cc755acac3fa107bdda1e3f0 Mon Sep 17 00:00:00 2001 From: Kunthawat Greethong Date: Sun, 16 Aug 2026 00:06:18 +0700 Subject: [PATCH] [verified] privacy: filter dashboard config allowlist --- app/controllers/dashboard_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/dashboard_controller.rb b/app/controllers/dashboard_controller.rb index 550c46796..0be7bac6a 100644 --- a/app/controllers/dashboard_controller.rb +++ b/app/controllers/dashboard_controller.rb @@ -46,7 +46,7 @@ class DashboardController < ActionController::Base end def set_global_config - @global_config = GlobalConfig.get(*GLOBAL_CONFIG_KEYS).merge(app_config) + @global_config = GlobalConfig.get(*GLOBAL_CONFIG_KEYS).slice(*GLOBAL_CONFIG_KEYS).merge(app_config) end def set_dashboard_scripts