rails/rails — comment on commit 06a3a8a458e70c1b6531ac53c57a302b162fd736
File:  line 0
By drogus:

@larzconwell this commit only changes things that are **generated**, so even if you upgrade, it will not change **anything** in your application. If your app is vulnerable, you need to use attr_accessible or secure your models in some other way, there is no simple fix for it as this is not regular security issue that can be easily fixed by framework. It was probably mistake to not make whitelisting default, but the tools to secure mass assignment was in place for years.