Change attr_protected to attr_accessible
authorChristian Johansen <christian@gitorious.com>
Tue, 12 Feb 2013 08:43:42 +0000 (09:43 +0100)
committerChristian Johansen <christian@gitorious.com>
Tue, 12 Feb 2013 08:43:42 +0000 (09:43 +0100)
commit6933cb13686de75bf1767b84ae06dc9b9201d702
treeb8895a3e956986ee4c31e9d2301f6d5091907520
parent975164e6e7aeab63eb9a41c8883e949c26daa1ef
Change attr_protected to attr_accessible

  - White-listing scales better than black-listing
  - Avoids vulnerability CVE-2013-0276
app/models/comment.rb
app/models/committership.rb
app/models/email.rb
app/models/group.rb
app/models/merge_request.rb
app/models/project.rb
app/models/site.rb
app/models/user.rb
test/unit/project_test.rb
test/unit/user_test.rb