decent_exposure + reform attributes protection fail.

reform_whitelist.rb

class Model < ActiveRecord::Base
end

class ModelForm
  property :a
  property :b
end

model = Model.new

model.attributes = { a: 1, b: 2, c: 3 }

form = ModelForm.new(model)

form.validate(a: 1, b: 2, c: 3)
form.save

model.reload.c # => 3