rails/strong_parameters
View on GitHub ↗ ★ 1,260 Ruby archived
Taint and required checking for Action Pack and enforcement in Active Model
6 mentions on Hacker News by 6 people: 1 story, 5 comments · first 2012-03-21 · latest 2016-01-26
20082026
-
…using permit! as it will allow all current and future model attributes to be mass-assigned. " [1] https://github.com/rails/strong_parameters#permitted-scalar-...
comment by enraged_camel · 2016-01-26 · in Multiple security vulnerabilities in Rails -
…gem at the time. For instance, implement strong parameters and you're one step closer to Rails 4. https://github.com/rails/strong_parameters
comment by usethis · 2013-06-25 · in Rails 4.0: Final version released -
…there are solutions to this, perhaps the existing model validation can somehow be used? [1]: https://github.com/rails/strong_parameters
comment by sandstrom · 2013-02-27 · in Introducing Mutations: Putting SOA on Rails for security and maintainability -
…(I believe) will be the default in Rails 4, and is only a gem install away from Rails 3.2 apps. https://github.com/rails/strong_parameters
comment by nthj · 2013-01-09 · in Multiple vulnerabilities in parameter parsing in Action Pack -
This has been solved already and will be part of Rails 4. Use strong parameters: https://github.com/rails/strong_parameters
comment by tilsammans · 2012-10-03 · in IOS 6 injecting should_group_accessibility_children to POST requests