Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Mass Assignment"
From NetSec
Line 7: | Line 7: | ||
There have been [[RoR_Patching#Params_Injection_.26_Mass_Assignment_Abuse|problems]] with RoR in the past with [[RoR_Patching#Params_Injection_.26_Mass_Assignment_Abuse|mass assignment]]. | There have been [[RoR_Patching#Params_Injection_.26_Mass_Assignment_Abuse|problems]] with RoR in the past with [[RoR_Patching#Params_Injection_.26_Mass_Assignment_Abuse|mass assignment]]. | ||
− | + | {{expand}} |
Revision as of 21:14, 19 May 2012
Typically used in Ruby on Rails, sometimes people will use the following code to create an ActiveRecord object to add a database entry:
<syntaxhighlight lang=ruby>
@user=User.new(params[:user])
</syntaxhighlight>
There have been problems with RoR in the past with mass assignment.
This article contains too little information, it should be expanded or updated. |
---|
Things you can do to help:
|