rails/rails — comment on commit 2b74968f03fa4fbdf8afaa497b8446cb00fbddcd
File:  line 0
By pixeltrix:

@tilsammans since @homakov used :trollface: in #5239 then calling him a troll is probably justified

@jyap808 the [“fix”][1] that was committed was [explicitly rejected][2] by @homakov - he wanted to special case certain attributes which would still leave holes where the attribute names didn't fit the pattern. Whilst it may have mitigated some attacks it would've engendered a false sense of security.

[1]: https://github.com/rails/rails/commit/641a4f62405cc2765424320932902ed8076b5d38
[2]: https://github.com/rails/rails/issues/5228#issuecomment-4263582