rails/strong_parameters

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1260 stars · 160 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Strong Parameters is a Ruby gem that provides whitelisting (permit) and required-key checking for Action Controller parameters, preventing accidental mass assignment of unpermitted attributes in Active Model. It is the standalone backport of the parameter filtering now built into Rails, with its last release in 2017 since the functionality lives in Rails itself.

Use cases

• prevent mass assignment vulnerabilities in Rails controllers
• whitelist which request parameters can update model attributes
• require certain params and return 400 Bad Request when missing
• permit nested parameters for forms with nested attributes
• filter out unpermitted scalar, array, and hash params
• secure create and update actions in a Rails API

When to choose

• you are on an old Rails 3.x app that needs mass assignment protection
• you want the standalone gem version of strong parameters outside a full Rails upgrade

When to avoid

• you are on Rails 4 or newer, where strong parameters are built into Action Controller
• you need actively maintained parameter validation tooling

Facets

library · maturity maintenance

security middleware form-handling web-development backend security ruby rails mass-assignment-protection parameter-whitelisting strong-parameters web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rails/strong_parameters")