Mass Assignment Part 2

safe_request_handling.md

##Web Application Code##

Within the request handling code:

_ = require('underscore');
var user = new User(_.pick(req.body, User.userCreateSafeFields));

Within the User model:

UserSchema.statics = {
    User.userCreateSafeFields: ['email', 'password', 'password_confirmation', 'first_name', 'last_name']
};