README in ryanlowe-audit_mass_assignment-0.1.3 vs README in ryanlowe-audit_mass_assignment-0.1.4
- old
+ new
@@ -1,40 +1,23 @@
Moved to GitHub from Google Code on May 1, 2008
Was hosted at http://code.google.com/p/audit-mass-assignment/
= audit_mass_assignment plugin for Ruby on Rails
-The audit_mass_assignment Ruby on Rails plugin contains a rake task that
-checks the models in your project for the attr_accessible whitelist approach
-for protecting against "mass assignment" exploits. It does not check for
-use of attr_protected!
+ The audit_mass_assignment Ruby on Rails plugin contains a rake task that
+ checks the models in your project for the attr_accessible whitelist approach
+ for protecting against "mass assignment" exploits. It does not check for
+ use of attr_protected.
-If a Rails model does not use attr_accessible, it fails this audit. The
-audit does not check which parameters are accessible or protected, only
-that at least one is marked as accessible.
-
-Run the audit whenever you feel like it! Other audit plugins for Rails
-could be created to automatically check for bad patterns or insecure
-code. This one was easy to implement.
-
== Installation
-It looks like Rails 2.1 will support "script/plugin install" with Git
-repositories. Until then you can put this plugin in vendor/plugins with:
+ gem install ryanlowe-audit_mass_assignment --source http://gems.github.com/
-git clone git://github.com/ryanlowe/audit_mass_assignment.git
-
-and delete the .git directory inside it before committing it to source control.
-
-When Rails 2.1 supports Git you should be able to do:
-
-script/plugin install git://github.com/ryanlowe/audit_mass_assignment.git
-
== Usage
$ rake audit:mass_assignment
-== NOTES
+== Notes
If you want to protect ALL attributes in your model use:
attr_accessible nil
\ No newline at end of file