Y
Hacker News
new
|
ask
|
show
|
jobs
ActiveRecord 3.1 - Mass-Assignment Roles
(
ablogaboutcode.com
)
16 points
by
panthomakos
5517 days ago
3 comments
oomkiller
5517 days ago
Write up a patch? It may be a little late in the game to be changing APIs, but it might be ok since it's just beta 1.
link
mark_l_watson
5517 days ago
This month's Communications of the ACM has a good article by Patrick McKenzie on Rails security, and the mass assignment vulnerability in particular.
link
roryokane
5517 days ago
link to that article:
http://m.cacm.acm.org/magazines/2011/5/107701-weapons-of-mas...
link
tomhallett
5517 days ago
Chaining the role would make it easier to add the role to inherited_resources, you'd just need to add it to your beginning_of_association_chain
link