Mass-assignment whitelist awareness. #1

Open
wants to merge 1 commit into
from

Conversation

Projects
None yet
2 participants
@oesmith
Collaborator

oesmith commented Aug 24, 2012

Uses a block instead of hash-assignment to avoid falling foul of mass
assignment whitelist protection.

Also adds attr_accessible to models to disallow mass-assignment. There's
negligible chance anybody ever writing some code that'll be vulnerable (I
hope), but it's worth having it in there so the tests exercise the block
change! :)

Mass-assignment whitelist awareness.
Uses a block instead of hash-assignment to avoid falling foul of mass
assignment whitelist protection.

Adds attr_accessible to models to disallow mass-assignment.  There's
negligible chance anybody ever writing some code that'll be vulnerable (I
hope), but it's worth having it in there so the tests exercise the block
change! :)
@travisbot

This comment has been minimized.

Show comment Hide comment
@travisbot

travisbot Aug 24, 2012

This pull request fails (merged 31fd8c5 into b3d6a1b).

This pull request fails (merged 31fd8c5 into b3d6a1b).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment