Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

This project is archived and is in readonly mode.

All changesets

Changeset [19c38a9b70c377c0a9e3b266f2b4023ff590ce02] by Michael Koziarski

Revision 19c38a9b70c377c0a9e3b266f2b4023ff590ce02, committed by Michael Koziarski · June 10th, 2009 @ 01:11 AM

Whitelist the methods which are called by multiparameter attribute assignment.

This prevents users from causing NoMethodErrors and the like by editing the parameter names, and closes a potential exploit of CVE-2009-1904. http://github.com/rails/rails/co...

1 changed file

  • M activerecord/lib/active_record/base.rb