Keep the riff raff out. Controller param white list protection - View it on GitHub