In Rails3, we use attr_accessible or attr_protected(Protected Attributes) to white-list attributes of a model for mass assignment. In Rails4, Protected Attributes was moved out as a Gem and similar feature was implemented at the controller level, which is now known … Continue reading

Read more at the source