backend · medium

Strong Parameters

Controller allowlist (`params.require(:post).permit(:title)`) so mass-assignment cannot set unexpected fields.