cjbottaro/param_protected — Issue #9: Default whitelist params
Author: zlw
Created: 2012-01-14 15:45:13+00:00
State: open

Hi,

I think that some params should be in whitelist by default:

```ruby
param_accessible [:utf8, :commit, :action, :controller, :id]

# or maybe even
param_accessible [:utf8, :commit, :action, :controller, :id, :authenticity_token, :page]
```

:authenticity_token is from devise
:page is used by kaminari/will_paginate (both are common used gems)