strong.pl

{ 
  name => 'John',
  age => '52',
  address => {
    street => "15604 Harry Lind Road",
    zip => "78621",
  },
  email => ['[email protected]', '[email protected]'],
  credit_cards: [
    { number => '245345345345345', exp => '2024-01-01' },
    { number => '666677777888878', exp => '2030-01-01' },
  ],
}

my $body = $c->req->body_params->strong(
  'name',
  'age',
  'pref' => +{}, # empty hashref means we allow anything under this (here be Dragons...)
  'address' => ['street', 'zip'],  # allow address.street / address.zip
  +{'email' => []}, # no keys, only values, ie email[0] = '...', email[1] = '...'
  +{'credit_cards' => ['number', 'exp']},
);

# $body->all / etc # various ways to get a hash from 
# ->body_params->whitelisted_keys('_add', '_delete') # Allow these keys anywhere anytime
# ->body_param->max_array_length(1000) # set the max number of items in an array allowed
# ->body_param->namespace('person') # start at 'person' (ie person.name => name)