The good ol' fashion way of restricting params in a controller. In response to https://twitter.com/awws/status/371437294776901632

gistfile1.rb

class PostsController
  def create
    @post = Post.new post_params
    @post.save
    respond_with @post
  end

  private

  def post_params
    params.fetch(:post, {}).slice :title, :slug, :body
  end
end