gistfile1.rb

Make sure that you don't allow attributes to be mass assigned from Backbone saves -- always whitelist and validate your incoming attributes. We use a helper function like this:
def pick(hash, *keys)
  filtered = {}
  hash.each do |key, value| 
    filtered[key.to_sym] = value if keys.include?(key.to_sym) 
  end
  filtered
end




model.update_attributes pick(params, :title, :description)