README
modella-protection
Protection for mass-assignment vulnerabilities for modella.
Installation
$ component install modella/protection
$ npm install modella-protection
API
Methods affected
modella-protection provides model#protectedSet
to set attributes using
protection.
Protection mode
Protection can be used in either a whitelist or blacklist mode. In white list mode,
only attributes with protected: false
are able to be set by mass assignment.
In black list mode, only variables with protected: true
will be filtered from
mass-assignment. The default is blacklist mode.
Model.whiteListProtection = true //Switch from the default to whitelist mode.
Defining Attributes
To protect a field, pass in the protected: true
option.
User.attr('username').attr('admin', { protected: true });
Setting Fields
var user = new User();
user.filteredSet({username: 'Bobby', admin: true});
user.get('admin') == undefined // true
License
MIT