kotovalexarian-likes-github/rails--rails
1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
Code Releases Activity
rails--rails/activemodel/lib
History
Rafael Mendonça França 306dc1a499 Check attributes passed to create_with and where 
If the request parameters are passed to create_with and where they can
be used to do mass assignment when used in combination with
Relation#create.

Fixes CVE-2014-3514

Conflicts:
	activerecord/lib/active_record/relation/query_methods.rb
2014-08-18 14:07:37 -03:00
..
active_model Check attributes passed to create_with and where 2014-08-18 14:07:37 -03:00
active_model.rb Autoload ActiveModel::StrictValidationFailed 2014-04-16 22:48:51 +01:00