AshCredo.Check.Warning.WildcardAcceptOnAction (ash_credo v0.5.2)

Copy Markdown View Source

Basics

This check is disabled by default.

Learn how to enable it via .credo.exs.

This check has a base priority of high and works with any version of Elixir.

Explanation

Using accept :* on create or update actions accepts all public attributes, which is a mass-assignment vulnerability. Explicitly list the accepted attributes instead.

create :create do
  accept [:title, :body]
end

Check-Specific Parameters

There are no specific parameters for this check.

General Parameters

Like with all checks, general params can be applied.

Parameters can be configured via the .credo.exs config file.