Rails: Brakeman gem unprotected mass assignment issue

Question

I am using brakeman gem to find the security issues in my rails application code.

brakeman giving me unprotected mass assigment security issue. below the line that causing this issue.

AuthenticationCode.new(:batch_id => batch_id, :code => code_string, :is_active => is_active)

But i am not doing any mass assignment here then why brakeman is giving me mass assignment security issue.

Thanks, Sanjay Salunkhe

Answer 1

I was using protected_attributes gem and that's why brakeman was giving me this issue. after removing protected gem attribute it worked.

Thanks,

Sanjay Salunkhe