presidentbeef/brakeman — Issue #34: Brakeman does not understand #attr_protected
Author: daveworth
Created: 2012-01-29 17:04:30+00:00
State: open

Given a model with attributes that should be protected, if the developer opts to protect them with `#attr_protected` rather than `#attr_accessible` brakeman still raises an issue (See: https://gist.github.com/1699632)

While, stylistically, it is generally better to white-list via `#attr_accessible` than black-list via `#attr_protected` often the latter makes more sense if there are many many un-protected attributes.