rails/rails — comment on commit 06a3a8a458e70c1b6531ac53c57a302b162fd736
File:  line 0
By drogus:

@larzconwell it's dead simple to do something like that in previous rails versions, by doing for example `ActiveRecord::Base.attr_accessible nil`, the thing is that if you have a big app that does not whitelist attributes, it will all break if you turn it on. That's why there is no simple magical fix for it.