Rails CVE-2014-3514: Strong Parameter bypass with create_with | Dark Hacker News