Top all-time · #8479
Jon Leighton
Personal blog · jonathanleighton.com/articlesprogrammingweb
Jon Leighton's personal blog at jonathanleighton.com covers programming and web. Since 2011, 9 different Hacker News readers have linked it 10 times, most often “Rails Users: Should Mass Assignment Security Happen In The Model?”. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Jon Leighton's blog for Rails writing, such as a post arguing that mass assignment security belongs outside the model, and cite his work on Rails associations.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Rails Users: Should Mass Assignment Security Happen In The Model?2 people · 2 mentions · first linked 2011-08-19
- Explaining Focused Controller - Ruby on Rails2 people · 2 mentions · first linked 2012-09-20
What Hacker News says?
"Mass assignment security is a feature that is aimed at dealing with form input. By placing it in the model, we end up making the implicit assumption that all ‘normal’ interaction with the model happens via a HTTP request. This assumption is incorrect and causes problems." http://jonathanleighton.com/articles/2011/mass-assignment-se...
Comment linking /articles/2011/mass-assignment-security-shouldnt-happen-in-the-model/
on “Chapter 6 of the Rails Tutorial, 2nd Edition is out ("Modeling users")”Submitted Square pegs, round holes, and Rails' directory structure as a story · 2 points
HN discussionI'm very much looking forward to making use of the associations rewrite by Jon Leighton ( http://jonathanleighton.com/ ). Nested has-many:through relationships are a go! :)
Comment linking /
on “Rails 3.1 beta 1 released”Submitted Poltergeist - A PhantomJS driver for Capybara as a story · 2 points
HN discussionSubmitted Rails Users: Should Mass Assignment Security Happen In The Model? as a story · 2 points
HN discussionSubmitted Principles for deciding what to work on as a story · 1 points
HN discussionSubmitted Overhauling Loco2's Hosting Infrastructure with AWS, Docker and Terraform as a story · 1 points
HN discussionSubmitted Explaining Focused Controller - Ruby on Rails as a story · 1 points
HN discussionSubmitted Explaining Focused Controller (for Rails) as a story · 1 points
HN discussionSubmitted Hashes and encapsulation as a story · 1 points
HN discussion