3 ms·

I haven't used it, but a quick Google search turns up this plugin, to require whitelisting mass-assignable attributes: http://github.com/ryanb/trusted-params h

I haven't used it, but a quick Google search turns up this plugin, to require whitelisting mass-assignable attributes: http://github.com/ryanb/trusted-params http://github.com/ryanb/trusted-params That should fix this problem for apps that use the plugin.

mhartl 17y ago
In a related vein, I wrote http://github.com/mhartl/find_mass_assignment http://github.com/mhartl/find_mass_assignment to find likely mass assignment vulnerabilities in Rails apps.