RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Why don't we validate controller parameters?

by Igor Springer —

How my one silly typo caused an avalanche of 500 errors (aka strong parameters are not enough to make RoR app secure enough) https://frontdeveloper.pl/2019/03/why-dont-we-validate-controller-parameters

Post a comment

You can use basic HTML markup (e.g. <a>) or Markdown.

As you are not logged in, you will be
directed via GitHub to signup or sign in