To be honest, mass assignment sounds like Rails' own "register_globals". The def... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

kalleboo on March 5, 2012 | parent | context | favorite | on: How github was hacked

To be honest, mass assignment sounds like Rails' own "register_globals". The default should be conservative and disallow setting any fields, instead of allowing anything to be changed.

bradleyjg on March 5, 2012 [–]

Early PHP is exactly what came to mind when I read the description.

Nothing new under the sun.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact