If you're using `protected_attributes` gem and would like to smoothly switch over to `strong_params`, this is a possible useful monkey patch to only use the mass assignment protection when handling controller params.

semi_strong_params.rb

# Not fully tested, use at own risk!

module ActiveModel
  module MassAssignmentSecurity

    # Original source: https://github.com/rails/protected_attributes/blob/0421e825911b05a77c6521171b43070c9e6c4b35/lib/active_model/mass_assignment_security.rb#L350
    def sanitize_for_mass_assignment(attributes, role = nil) #:nodoc:
      if attributes.respond_to?(:permitted?) && _uses_mass_assignment_security
        _mass_assignment_sanitizer.sanitize(self.class, attributes, mass_assignment_authorizer(role))
      else
        sanitize_forbidden_attributes(attributes)
      end
    end

  end
end