Puts ActiveRecord::SessionStore attributes in white list, fixes #483 #484

merged 1 commit into from May 10, 2011


None yet

2 participants


When using global whitelisting, AR::SS does not work at all (depending of your RDBMS you may get an ActiveRecord::StatementInvalid exception because of NULL constraint on session_id).

This problem exists in Rails 2, Rails 3 and Rails 3.1.

But as Rails 3.1 got a new feature to easily enable global whitelisting (config.active_record.whitelist_attributes = true), I think we should fix AR::SS to work by default when using this feature.

@josevalim josevalim merged commit fa8b0f4 into rails:master May 10, 2011
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment