Skip to content
This repository was archived by the owner on Aug 17, 2017. It is now read-only.
This repository was archived by the owner on Aug 17, 2017. It is now read-only.

No exception raised for forbidden attributes. #247

Description

@bigtunacan

I'm not getting any exceptions raised for forbidden attributes and mass assignment is still allowed.

I have done the following

  1. Added the strong_parameters gem
  2. Created initializers/strong_parameters.rb

ActiveRecord::Base.class_eval do include ActiveModel::ForbiddenAttributesProtection end

  1. Added config.action_controller.action_on_unpermitted_parameters = :raise for all environments.
  2. Removed all attr_accessible calls from models

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions