payments_controller.rb in spree_backend-2.1.5

- old
+ new

@@ -69,10 +69,10 @@
 
       def object_params
         if params[:payment] and params[:payment_source] and source_params = params.delete(:payment_source)[params[:payment][:payment_method_id]]
           params[:payment][:source_attributes] = source_params
         end
-        params.require(:payment).permit(:amount, :payment_method_id, source_attributes: [:number, :expiry, :verification_value])
+        params.require(:payment).permit(permitted_payment_attributes)
       end
 
       def load_data
         @amount = params[:amount] || load_order.total
         @payment_methods = PaymentMethod.available(:back_end)