added test to make sure password is not leaked in user json/xml feed

2011-09-10 16:02:16 -04:00
parent a7846731d5
commit d9c3a5b519
2 changed files with 40 additions and 1 deletions
--- a/config/initializers/active_record_api_extensions.rb
+++ b/config/initializers/active_record_api_extensions.rb
@@ -17,7 +17,8 @@ module Danbooru
        options[:except] += hidden_attributes
        super(options, &block)
      end
-      
+    
+    protected
      def hidden_attributes
        [:uploader_ip_addr, :updater_ip_addr, :creator_ip_addr, :ip_addr]
      end