@tekin's Twitter archive

I'm undecided as to whether mass-assignment protection belongs in the Model or Controller, but you can force whitelist mode in ActiveRecord