Avoid assignment of protected attributes.
Avoid jumping out of nested resource path.