0d01c33482
All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that. The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method. It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments. |
||
|---|---|---|
| .. | ||
| 01-redis.rb | ||
| 02-freedom_patches.rb | ||
| 03-sql_builder.rb | ||
| 04-message_bus.rb | ||
| 05-site_settings.rb | ||
| 06-mini_profiler.rb | ||
| 07-backtrace_silencers.rb | ||
| 08-rack-cors.rb | ||
| 99-rack-cache.rb | ||
| airbrake.rb.sample | ||
| discourse_iife.rb | ||
| inflections.rb | ||
| mime_types.rb | ||
| oj.rb | ||
| omniauth.rb | ||
| pluralization.rb | ||
| quiet_logger.rb | ||
| rails3_ar_after_commit_tests.rb | ||
| secret_token.rb | ||
| session_store.rb | ||
| sidekiq.rb | ||
| silence_logger.rb | ||
| strong_parameters.rb | ||
| verify_config.rb | ||
| vestal_versions.rb | ||
| watch_for_restart.rb | ||
| wrap_parameters.rb | ||