Yeah, the discussion here seems to be missing the forest for the trees. For non-Rails programmers an idea such as mass assignment sounds very strange, but if y

Yeah, the discussion here seems to be missing the forest for the trees. For non-Rails programmers an idea such as mass assignment sounds very strange, but if you ignore that, it still sounds odd at first request than an OS would inject parameters into a HTTP post request.