Comment by jmcnevin

This (mass-assignment) is fairly standard Rails-fu, so its fair to assume that this could affect a lot of apps out there.