强大的参数允许使用数组

Question

I have data I am trying to POST that looks like { foo: [[:bar, 1], [:baz, 0]] } .

How do I permit that using strong parameters ? The closest I can get is

params.permit(foo: [[]]) which returns {"foo"=>[]}

Answer 1

Maletor,

it seems to me that the strong parameters can't handle array of array. I did read the code of it in github and it deals with Symbol, String and Hash .

For this case you'll have to handle with your own code.

Answer 2

Basically:

def permitted_params
  result = params.require(:model).permit(:attributes).to_h # No array of arrays or hashes
  result[:model][:array_of_arrays] = params[:model][:array_of_arrays]
  result
end

One step further, say you have a Model#json and you want to store model.json[:array_of_arrays] = [[]] :

def permitted_params
  result = params.require(:model).permit(:attributes).to_h # No array of arrays or hashes
  result[:json] ||= {}
  result[:json].merge!(array_of_arrays: params[:model][:json][:array_of_arrays])
  result
end

Make sure you have permitted all your un-trusted params before you call to_h , and be careful what you merge in afterwards.