3 ms·
In Shapado we use a safe_update methode like this so we always need to specify which attribute can be updated: @question.safe_update(%w[title body language tag
by patrickaljord 16y ago
In Shapado we use a safe_update methode like this so we always need to specify which attribute can be updated:
@question.safe_update(%w[title body language tags], params[:question])
- epochwolf 16y agoI like this better than my solution, which was to specific which params were allowed for each controller action and remove any that weren't allowed.