Strong Parameters for Rails: Mass assignment in the controller

See also <a href="https://github.com/technoweenie/tainted_hash" rel="nofollow">https://github.com/technoweenie/tainted_hash</a>

Good to see there's <i>some</i> response from Rails core for last month's github kerfuffle.