Robert Thau

This pull request deals with #14 by eliminating the default behavior of synthesizing a whitelist (which likely includes attributes that a client isn't meant to be able to set directly,...

'resource_name'_params whitelists can be bypassed (and other strong params glitches)

4

It's great to see this gem updated to deal with Rails 4 and 5, but the integration with the (then-)new strong parameters machinery seems to have a few rough spots....

Updating my app, I discovered that 'map.resources :requests' breaks recent versions of resources_controller --- this defines a 'request_path' named route, which in turn winds up clobbering resources_controller's internal method by...