4 ms·
Rails bugtracker != notifying the people at github that they forgot to add a mass-assign protection.
by phillmv 15y ago
Rails bugtracker != notifying the people at github that they forgot to add a mass-assign protection.
- deleted 15y ago[deleted]
- ramblerman 15y agoyou're missing the point. If the good engineers at github are getting this wrong then chances are this is a common security flaw. Hence a plea to the framework to make this a default.