if you're a rails developer, you really need to know this #secutiry #massassignment

ActiveModel::MassAssignmentSecurity::ClassMethods

if you're a rails developer, you really need to know this #secutiry #massassignment

macro: Mass-assignment will only set attributes in this list, to assign to the rest of attributes you can use direct writer methods. This is meant to protect sensitive attributes from being overwritten by malicious users tampering with URLs or forms. If you’d rather start from an all-open default and restrict attributes as needed, have a look at

Full article: http://api.rubyonrails.org/classes/ActiveModel/MassAssign...

Tweets

@Espen_Antonsen » 10 Mar '12, 4am
Not possible to do something like this? attr_accessible :default + :secret_attr, :as => :admin. So many attributes… [link]
@brunoandradd » 07 Mar '12, 4am
@AkitaOnRails,isso já pode ser feito de forma parecida [link]
@yuki24 » 06 Mar '12, 3am
@sumiking @sora_h attr_accessible は権限によってアクセスできる column を変更することも可能です。なので、あとは設計思想ですね。この例でも、controller と model が混在してます。 [link]
@akahn » 05 Mar '12, 2pm
RT @hardbap: Rails 3 let's you do mass-assignment checking in the controller out of the box: [link]
@diegorv » 05 Mar '12, 1pm
@dhh @homakov attr_accessible is already available in controller isn't? [link]
@diegorv » 05 Mar '12, 1pm
attr_accessible is already available in controller isn't? [link] #rails
@hardbap » 05 Mar '12, 12pm
Rails 3 let's you do mass-assignment checking in the controller out of the box: [link]
@thxbutnthx » 05 Mar '12, 2am
“@dhh: [...] guard against mass-assignment bugs: https://t.co/b4KLegXj” or there's [link]
@delicerubyrails » 05 Mar '12, 2am
Module: ActiveModel::MassAssignmentSecurity::ClassMethods: [link]
@zellux » 05 Mar '12, 1am
attr_accessible 也可以用在 controller 中，这个是 Rails 文档中的例子 [link]
@cantoniodasilva » 05 Mar '12, 1am
@lucashungaro é acredito que sim também.. não que seja difícil de ser feito hoje em dia, como mandou o @diegorv: [link]
@diegorv » 05 Mar '12, 1am
@sryche @cantoniodasilva existe attr_accessible no controller?! [link]
@mariovisic » 05 Mar '12, 1am
Rails Mass assignment protection in the controller (not the model). Neat-o [link]
@vinibaggio » 27 Feb '12, 1pm
RT @plentz: if you're a rails developer, you really need to know this [link] #secutiry #massassignment
@plentz » 27 Feb '12, 1pm
if you're a rails developer, you really need to know this [link] #secutiry #massassignment
@jamesarosen » 05 Mar '12, 3pm
RT @hardbap: Rails 3 let's you do mass-assignment checking in the controller out of the box: [link]
@dannluciano » 27 Feb '12, 1pm
RT @plentz: if you're a rails developer, you really need to know this [link] #secutiry #massassignment
@caironoleto » 27 Feb '12, 1pm
RT @plentz: if you're a rails developer, you really need to know this [link] #secutiry #massassignment

Ruby on Rails Database Sharding: A Quick Primer...

engineyard.com 28 Feb '12, 3am

Sharding is usually the final strategy to reach for when scaling a Ruby on Rails app: caching, offloading, and data segmen...

What engineers really do… #FPGA #EDA #MCU

eetimes.com 25 Feb '12, 6pm

I know you will think this is silly, but when I was a student at university, I had a recurring daydream in which I had gra...

Are we really at Peak Telecom?

investmentmoats.com 26 Feb '12, 2am

You are starting to see it. The ARPU is not jumping. There isn’t much drivers for the 3 telecoms. They are fighting for ea...

What every Malaysian needs to know about ‘race’...

blog.limkitsiang.com 27 Feb '12, 3am

By Clive Kessler | February 26, 2012 The Malaysian Insider (Part 2 & Part 2b ) Feb 26 — The many faces of “bangsa”: “Peopl...

Moving from beginner to intermediate Rails deve...

everydayrails.com 22 Feb '12, 2pm

Moving from beginner to intermediate Rails development July 05, 2010 I believe that Rails is an excellent way to get start...

10 Things You Need to Know (Now!) About Success...

youngupstarts.com 23 Feb '12, 9am

by Vickie Milazzo, author of “Wicked Success Is Inside Every Woman “ In the business world, we’re often advised to network...

We Know What's For Dinner But Not What's On Our...

seventhgeneration.com 25 Feb '12, 3pm

...and the odds are good that whatever's there has been genetically altered because genetically engineered (GE) organisms ...

Say whuuuttt? Blog- No Winners for YTL mYPrize ...

malaysianwireless.com 27 Feb '12, 9am

Firstly, on behalf of YTL Communications, we would like to express our sincere appreciation for your participation in the ...

Edge Rails: PATCH is the new primary HTTP metho...

weblog.rubyonrails.org 26 Feb '12, 1am

Edge Rails: PATCH is the new primary HTTP method for updates Posted by fxn February 26, 2012 @ 01:54 AM What is PATCH? The...

@gilesgoatboy

gilesbowkett.blogspot.com 23 Feb '12, 10pm

We use a bizarre, convoluted mechanism for attaching ClassMethods and InstanceMethods modules to ActiveRecord::Base becaus...

Mitsubishi 'i' Electric Car: Ultimate Guide, Wh...

greencarreports.com 24 Feb '12, 1pm

has gone down so well, we thought you might find a similar page useful for the quirky "i" electric car and its Citroen and...

All they need is now! #duranlive

todayonline.com 21 Feb '12, 12am

In 1981, a 21-year-old Simon Le Bon was introduced by an ex-girlfriend to John Taylor and Nick Rhodes in a Birmingham nigh...

@CodeAcademy peeps - if you're looking to get s...

everydayrails.com 23 Feb '12, 5am

Everyday Rails is about using the Ruby on Rails web application framework to get stuff done as a web developer. Learn more...

The sky is falling! (No, really.)

grist.org 23 Feb '12, 4pm

This is not a joke: The sky is falling. Or technically, the height of clouds , the average of which decreased about 1 perc...

Ruby on Rails developer: Martin Aceto from Arge...

workingwithrails.com 14 Feb '12, 11pm

Available for hire Martin Aceto Aliases MAceto Location Argentina , Capital Federal Company Backing S.A. , Buenos Aires - ...