Change attr_protected to attr_accessible
authorChristian Johansen <christian@gitorious.com>
Tue, 12 Feb 2013 08:43:42 +0000 (09:43 +0100)
committerChristian Johansen <christian@gitorious.com>
Tue, 12 Feb 2013 09:09:41 +0000 (10:09 +0100)
commit088a86b369b649378c2060d76968a9af703a2080
treeacbbaf69b30dbeedea1ab7a00a60c0a6177d499e
parentafdfe0ccc53cecf629388dad729d1d4245356d7e
Change attr_protected to attr_accessible

  - White-listing scales better than black-listing
  - Avoids vulnerability CVE-2013-0276

Backported from Gitorious 3

Conflicts:
app/models/email.rb
app/models/group.rb
app/models/site.rb
app/models/user.rb
test/unit/project_test.rb
test/unit/user_test.rb
app/models/comment.rb
app/models/committership.rb
app/models/email.rb
app/models/group.rb
app/models/merge_request.rb
app/models/project.rb
app/models/site.rb
app/models/user.rb
test/unit/project_test.rb
test/unit/user_test.rb