rails/rails — comment on commit 06a3a8a458e70c1b6531ac53c57a302b162fd736
File:  line 0
By larzconwell:

@marcoemrich Definitely true, developers should use attr_accessible no matter what.

@why-el Well an existing application should already have attr_accessible in it, but un-comment `config.active_record.whitelist_attributes = true` into your config/application.rb