# config/initializers/disable_mass_assignment.rb
    ActiveRecord::Base.send(:attr_accessible, nil)

    # app/models/some_model.rb
    class SomeModel < ActiveRecord::Base
      attr_accessible :whitelisted, :attributes
    end