# rails/strong_parameters

Taint and required checking for Action Pack and enforcement in Active Model

Repository: https://github.com/rails/strong_parameters
Canonical: https://ross.abutalabs.com/products/strong_parameters
Language: Ruby
License: MIT
License Family: permissive
Archived: true
Last push: 2017-08-08T18:36:31+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 5286, "days_push": 3312, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1260, forks 160 (observed 2026-08-28T04:04:09.971885+00:00)

## What it is
Strong Parameters is a Ruby gem that provides whitelisting (permit) and required-key checking for Action Controller parameters, preventing accidental mass assignment of unpermitted attributes in Active Model. It is the standalone backport of the parameter filtering now built into Rails, with its last release in 2017 since the functionality lives in Rails itself.

## Use cases
- prevent mass assignment vulnerabilities in Rails controllers
- whitelist which request parameters can update model attributes
- require certain params and return 400 Bad Request when missing
- permit nested parameters for forms with nested attributes
- filter out unpermitted scalar, array, and hash params
- secure create and update actions in a Rails API

## When to choose
- you are on an old Rails 3.x app that needs mass assignment protection
- you want the standalone gem version of strong parameters outside a full Rails upgrade

## When to avoid
- you are on Rails 4 or newer, where strong parameters are built into Action Controller
- you need actively maintained parameter validation tooling

## Facets
- artifact type: library
- maturity: maintenance
- function: security, middleware, form-handling
- domain: web-development, backend, security
- platform: ruby
- tags: rails, mass-assignment-protection, parameter-whitelisting, strong-parameters, web-server

## Member repositories
- rails/strong_parameters (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:09.971885+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:04:24.393606+00:00, confidence not recorded.
  - readme: https://github.com/rails/strong_parameters (fetched 2026-08-28T04:04:09.971885+00:00, sha 97f5fb4c2356)
- Data as of 2026-08-30T08:39:29.467469+00:00.