Comment Comment by atambo I think it's a mass assignment vulnerability:https://github.com/rails/rails/issues/5228 parent atambo 14 years ago
https://github.com/rails/rails/issues/5228