Re: ActiveResource: Disallowed type attribute: "symbol" in Rails 3.2.11

Jordon Bedwell
Mon, 14 Jan 2013 14:26:41 -0000

On Mon, Jan 14, 2013 at 8:23 AM, Paul
<paul-mzPrHiy5csbYtjvyW6yDsg@public.gmane.org>
wrote:
> Has anyone started seeing the error:
>
> Disallowed type attribute: "symbol"
> I found this blog entry which seems to completely describe the problem:
>
http://techtime.getharvest.com/blog/activeresource-xml-bug-fix-for-rails-3-dot-0-19
> but it claims that the problem was only in older versions of Rails.
>
> There is a proposed fix for Rails 3.0, but that obviously wouldn''t
help me.
>
> I was wondering if the problem was in all versions of Rails, not just 3.0.
> It did just appear and neither my web service nor the ActiveResource model
> has changed recently.

That fix was brought into all currently maintained versions of Rails.
You should not be symbolizing untrusted input anyways, unless you like
opening up a world of hurt.