I'm not getting any exceptions raised for forbidden attributes and mass assignment is still allowed. I have done the following 1) Added the strong_parameters gem 2) Created initializers/strong_parameters.rb `ActiveRecord::Base.class_eval do include ActiveModel::ForbiddenAttributesProtection end` 3) Added `config.action_controller.action_on_unpermitted_parameters = :raise` for all environments. 3) Removed all attr_accessible calls from models
I'm not getting any exceptions raised for forbidden attributes and mass assignment is still allowed.
I have done the following
ActiveRecord::Base.class_eval do include ActiveModel::ForbiddenAttributesProtection endconfig.action_controller.action_on_unpermitted_parameters = :raisefor all environments.