rapid7/metasploit-framework — pull request #239 by gregory-m (2012-03-15 15:10:25+00:00)
Title: Added rails_mass_assignment module.

This module scans Ruby On Rails sites for models with attributes not protected by attr_protected or attr_accessible.

Read more here: http://guides.rubyonrails.org/security.html#mass-assignment

Or:
https://github.com/rails/rails/commit/b83965785db1eec019edf1fc272b1aa393e6dc57
http://news.ycombinator.com/item?id=3663197

I create simple rails app to test module: http://dl.dropbox.com/u/2636565/testa.zip

Thanks.