avoinministerio/avoinministerio — pull request #202 by jyrkive (2012-07-30 13:41:33+00:00)
Title: Security hardening for signing

This commit keeps Signature#state from being accessible for mass-assignment. Therefore any code that changes signature state must explicitly use the state= accessor and code like

@signature.update_attributes(params[:signature])

will not change the state of the signature. As a result, this commit makes it less likely that an attacker will find a way to sign a proposal without authentication.