rails/rails — pull request #9569 by laserlemon (2013-03-05 17:13:58+00:00)
Title: Always compact array parameters rather than setting them to nil

The [CVE-2013-0155 security vulnerability](https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/t1WFuuQyavI) outlines how array parameters
containing `nil` values can be dangerous when accepted directly into
Active Record finder methods. The previous fix has been to detect array
parameters with `nil` values and to clobber the entire array into `nil`.

Instead, compacting the array solves the security issue and causes less
surprise in the case where array parameters are expected, as is often
the case when accepting nested attributes for collections.