Matt Yoho mattyoho

Proposal for Improving Mass Assignment

For a while, I have felt that the following is the correct way to improve the mass assignment problem without increasing the burden on new users. Now that the problem with the Rails default has been brought up again, it's a good time to revisit it.

Sign Allowed Fields

When creating a form with form_for, include a signed token including all of the fields that were created at form creation time. Only these fields are allowed.

To allow new known fields to be added via JS, we could add:

Patched ruby 1.9.3-p125 for 30% faster rails boot

What is?

This script installs a patched version of ruby 1.9.3-p125 with patches to make ruby-debug work again (#47) and boot-time performance improvements (#66 and #68), and runtime performance improvements (#83 and #84). It also includes the new backported GC from ruby-trunk.

Huge thanks to funny-falcon for the performance patches.

	require 'minitest/autorun'

	###
	# Test to demonstrate TCO in Ruby. Tested in 1.9.2+
	class TestTCO < MiniTest::Unit::TestCase
	code = <<-eocode
	class Facts
	def fact_helper(n, res)
	if n == 1
	res

	# Place in config/initializers/

	Rails.application.assets.logger = Logger.new('/dev/null')
	Rails::Rack::Logger.class_eval do
	def call_with_quiet_assets(env)
	previous_level = Rails.logger.level
	Rails.logger.level = Logger::ERROR if env['PATH_INFO'].index("/assets/") == 0
	call_without_quiet_assets(env).tap do
	Rails.logger.level = previous_level
	end

	describe "Shopping Cart Requests" do
	let!(:user) { Fabricate(:user) }

	before(:each) do
	login_user_post("admin", "admin")
	end

	context "when I visit the shopping cart" do
	it " show the logged in users' cart items " do
	#Test stuff

	# Install with:
	# bash < <(curl -L https://raw.github.com/gist/1982760)
	#
	# Reference: http://blog.wyeworks.com/2011/11/1/ruby-1-9-3-and-ruby-debug

	echo "Installing ruby-debug with ruby-1.9.3-p125 ..."

	curl -OL http://rubyforge.org/frs/download.php/75414/linecache19-0.5.13.gem
	curl -OL http://rubyforge.org/frs/download.php/75415/ruby-debug-base19-0.11.26.gem

	# Install with:
	# bash < <(curl -L https://raw.github.com/gist/1333785)
	#
	# Reference: http://blog.wyeworks.com/2011/11/1/ruby-1-9-3-and-ruby-debug

	echo "Installing ruby-debug with ruby-1.9.3-p0 ..."

	curl -OL http://rubyforge.org/frs/download.php/75414/linecache19-0.5.13.gem
	curl -OL http://rubyforge.org/frs/download.php/75415/ruby-debug-base19-0.11.26.gem

	class Lisp
	def initialize
	@env = {
	:label => lambda { \|(name,val), _\| @env[name] = val },
	:quote => lambda { \|sexpr, _\| sexpr[0] },
	:car => lambda { \|(list), _\| list[0] },
	:cdr => lambda { \|(list), _\| list.drop 1 },
	:cons => lambda { \|(e,cell), _\| [e] + cell },
	:eq => lambda { \|(l,r), _\| l == r },
	:if => lambda { \|(cond, thn, els), ctx\| eval(cond, ctx) ? eval(thn, ctx) : eval(els, ctx) },

	## Rails 3.2.0 (January 20, 2012) ##

	* Upgrade mail version to 2.4.0 ML

	* Remove Old ActionMailer API Josh Kalderimis