Questions about this topic? Sign up to ask in the talk tab.
Mass Assignment
From NetSec
Typically used in Ruby on Rails, sometimes people will use the following code to create an ActiveRecord object to add a database entry:
<syntaxhighlight lang=ruby>
@user=User.new(params[:user])
</syntaxhighlight>
There have been problems with RoR in the past with mass assignment.
