Model Attr Accessible High

Avoid permitting sensitive attributes like admin, token, account_id, banned in Rails strong parameters and Improper usage of create_with functionality, as they may pose a mass assignment security risk. Review the necessity of exposing such attributes and consider restricting their inclusion for improved security.

Detector ID
ruby/model-attr-accessible@v1.0
Category
Common Weakness Enumeration (CWE) external icon
Tags
-