rails/rails — comment on commit 06a3a8a458e70c1b6531ac53c57a302b162fd736
File:  line 0
By byroot:

Maybe I'm outdated, but I remember a Github conf saying that Github is still mostly under Rails 2.3.
So they do not use attr_accessible.

On another topic, I think this is not the role of the model layer to sanitize the user input.