gistfile1.rb

allowed_params = [:name, :stats, :xpto]
params = {
  name: 'Blabla',
	stats: '123'
}

def update(allowed_params, params)
	# validate if params are allowed
	params.each do |param|
		raise 'Bad Request' unless allowed_params.include? params
	end

	# proceed to update the data
end

p 'First try'
update(allowed_params, params)

p 'Second try'
update(allowed_params, params.merge!({illegal: '123'}))