From aa2639e746d8af5d7673bbbbbccbe868edeb0161 Mon Sep 17 00:00:00 2001 From: Bogdan Gusiev Date: Mon, 30 May 2011 11:34:00 +0300 Subject: ActiveModel::MassAssignmentSecurity.mass_assignment_sanitizer method In order to specify your own sanitize method Implemented .mass_assignment_sanitizer configuration option --- .../lib/active_model/mass_assignment_security/sanitizer.rb | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'activemodel/lib/active_model/mass_assignment_security/sanitizer.rb') diff --git a/activemodel/lib/active_model/mass_assignment_security/sanitizer.rb b/activemodel/lib/active_model/mass_assignment_security/sanitizer.rb index 5dbcf473bd..4dfff050a8 100644 --- a/activemodel/lib/active_model/mass_assignment_security/sanitizer.rb +++ b/activemodel/lib/active_model/mass_assignment_security/sanitizer.rb @@ -20,7 +20,7 @@ module ActiveModel end end - class DefaultSanitizer < Sanitizer + class LoggerSanitizer < Sanitizer attr_accessor :logger @@ -33,5 +33,15 @@ module ActiveModel self.logger.debug "WARNING: Can't mass-assign protected attributes: #{attrs.join(', ')}" if self.logger end end + + class StrictSanitizer < Sanitizer + def process_removed_attributes(attrs) + raise ActiveModel::MassAssignmentSecurity::Error, "Can't mass-assign protected attributes: #{attrs.join(', ')}" + end + end + + class Error < StandardError + end + end end -- cgit v1.2.3