default_whitelist 0.0.1

data/README.md

@@ -0,0 +1,11 @@
+# default_whitelist
+
+Default whitelist changes the default strategy for mass-assignment protection in Ruby on Rails to whitelisting by default. Currently, one must explictly declare which attributes are mass-assignable, e.g. with `ActiveRecord::Base#update_attributes` or all attributes can be mass-assigned. This might not be sensible default as simple omission can leave applications with obvious security vulnerabilities.
+
+To install:
+
+`gem install default_whitelist`
+
+To user:
+
+`require default_whitelist`

data/default_whitelist.rb

@@ -0,0 +1,8 @@
+require 'rails'
+
+class DefaultWhitelist < Rails::Railtie
+  config.before_initialize do
+    ActiveRecord::Base.instance_eval { attr_accessible }
+  end
+end
+

metadata

@@ -0,0 +1,57 @@
+--- !ruby/object:Gem::Specification
+name: default_whitelist
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Stevie Graham
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-03-05 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: &70165305604700 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *70165305604700
+description: Protects all ActiveRecord model attributes from mass assignment by default
+email: sjtgraham@mac.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- default_whitelist.rb
+homepage: http://github.com/stevegraham/default_whitelist
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- .
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: 1.8.7
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.6
+signing_key: 
+specification_version: 3
+summary: Protects all ActiveRecord model attributes from mass assignment by default
+test_files: []