Protection for mass-assignment vulnerabilities for modella.
npm install modella-protection Protection for mass-assignment vulnerabilities for
modella.
$ component install modella/protection
$ npm install modella-protection
modella-protection provides model#protectedSet to set attributes using
protection.
Protection can be used in either a whitelist or blacklist mode. In white list mode,
only attributes with protected: false are able to be set by mass assignment.
In black list mode, only variables with protected: true will be filtered from
mass-assignment. The default is blacklist mode.
Model.whiteListProtection = true //Switch from the default to whitelist mode.
To protect a field, pass in the protected: true option.
User.attr('username').attr('admin', { protected: true });
var user = new User();
user.filteredSet({username: 'Bobby', admin: true});
user.get('admin') == undefined // true
MIT