mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
4642d68d80
Instance level writers can have an impact on how the Active Model / Record objects are saved. Specifically, they can be used to bypass validations. This is a problem if mass assignment protection is disabled and specific attributes are passed to the constructor. CVE-2016-0753 |
||
---|---|---|
.. | ||
json.rb |