Unpermitted strong parameter lost in logs

Looks like there’s a lot of support for this.

Does anyone want to step up as a champion for making this a Rails default?

That would look like:

  1. Opening an issue on the Rails Github asking about this. This issue should frame the problem as clearly as possible. It should also make it clear that you’re willing to do the work of making this change happen.
  2. Assuming there’s positive feedback from the Rails maintainers on your issue, write a PR (or collaborate with someone on it). Work with the maintainers to get it shipped.

Some concerns I can see them having:

  • What does the change path would look like for old projects that haven’t manually set this as a default?

If the issue opened can talk about e.g. how to effectively warn users about the behavior change, possibly by phasing this over multiple Rails versions, that will help the maintainers visualize a world in which this change can be made safely.

1 Like