Skip to content

Commit f31ade0

Browse files
committed
Merge pull request #3024 from Schlaefer/patch-2
no mass assignment protection on bake console
2 parents 5c776a7 + dd78e99 commit f31ade0

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

en/orm/entities.rst

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -247,9 +247,8 @@ Mass Assignment
247247
While setting properties to entities in bulk is simple and convenient, it can
248248
create significant security issues. Bulk assigning user data from the request
249249
into an entity allows the user to modify any and all columns. When using
250-
anonymous entity classes CakePHP does not protect against mass-assignment. You
251-
can easily protect against mass-assignment by using :doc:`/bake` to generate your
252-
entities.
250+
anonymous entity classes or creating the entity class with the :doc:`/bake`
251+
CakePHP does not protect against mass-assignment.
253252

254253
The ``_accessible`` property allows you to provide a map of properties and
255254
whether or not they can be mass-assigned. The values ``true`` and ``false``

0 commit comments

Comments
 (0)