Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

This project is archived and is in readonly mode.

All changesets

Changeset [c014c3e5c14beb71fa7c67f15448386d0ffaba28] by Michael Koziarski

Revision c014c3e5c14beb71fa7c67f15448386d0ffaba28, committed by Michael Koziarski · June 10th, 2009 @ 01:12 AM

Whitelist the methods which are called by multiparameter attribute assignment.

This prevents users from causing NoMethodErrors and the like by editing the parameter names, and closes a potential exploit of CVE-2009-1904. http://github.com/rails/rails/co...

1 changed file

  • M activerecord/lib/active_record/base.rb