http://simonwillison.net/2008-09-22T20:28:12+00:00Simon Willison2008-09-22T20:28:12+00:002008-09-22T20:28:12+00:00https://simonwillison.net/2008/Sep/22/rails/#atom-tag

<p><strong><a href="http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment">Is your Rails application safe?</a></strong></p> update_attributes(params[:foo]) in ActiveRecord is an anti-pattern. <p><small></small>Via <a href="http://news.ycombinator.com/item?id=311345">news.ycombinator.com</a></small></p> <p>Tags: <a href="https://simonwillison.net/tags/activerecord">activerecord</a>, <a href="https://simonwillison.net/tags/antipattern">antipattern</a>, <a href="https://simonwillison.net/tags/rails">rails</a>, <a href="https://simonwillison.net/tags/security">security</a></p>