Drew Ulmer d20fdf87b6 Introduce BaseSanitizer null sanitizer and controller-specific callbacks ...

This updates Devise's StrongParameter support to feature:

- A Null base sanitizer to support existing Rails 3.x installations that
  don't want to use StrongParameters yet
- A new, simpler API for ParameterSanitizer: #permit, #permit!, and #forbid
- Overrideable callbacks on a controller-basis, e.g. #create_sessions_params
  for passing the current scope's parameters through StrongParameters and
  a helper method, whitelisted_params, for rolling your own implementations
  of #create_x_params in your own controllers.
- Lots of tests!

2013-04-10 10:33:50 -05:00

..

devise

Introduce BaseSanitizer null sanitizer and controller-specific callbacks

2013-04-10 10:33:50 -05:00

generators

Remove protected_attributes gem and all whitelisting

2013-03-31 15:21:49 -05:00

devise.rb

Introduce BaseSanitizer null sanitizer and controller-specific callbacks

2013-04-10 10:33:50 -05:00