fix: whitelister les champs autorisés sur create/update (mass assignment)

2026-07-04 15:08:19 +04:00
parent 1d54d287e1
commit 90c048a282
6 changed files with 108 additions and 8 deletions
@@ -37,7 +37,8 @@ module.exports = createCoreController('api::artiste.artiste', ({strapi}) => ({
    } else {
      const newArtiste = await strapi.documents('api::artiste.artiste').create({
        data: {
-          ...data
+          alias: data.alias,
+          user: user.id
        }
      })
      return newArtiste