Rails ActiveModel::ForbiddenAttributesError

Question

Rarils4.0.0我试图发布一个评论，但我有一个错误：

ActiveModel：：CommentsController#create中的ForbiddenAttributesError

def create
@comment = @article.comments.new(params[:comment]) #error point highlight this line

Parameters
{"utf8"=>"✓",
 "authenticity_token"=>"zSq3KpEbucFQLa6XStEJ/I0+CpKPLFYcU/WGIdneeMg=",
 "comment"=>{"name"=>"g12345",
 "email"=>"g12345@12345.com",
 "body"=>"hello hello"},
 "commit"=>"Add",
 "article_id"=>"5"}

我的评论/new.html.erb

<%= form_for([@article, @article.comments.new], remote: true) do |f| %>
<%= tag(:input, :type => "hidden", :name => request_forgery_protection_token.to_s, :value => form_authenticity_token) %>
<div class="field">
<%= f.label :name %><br />
<%= f.text_field :name %>
</div>
<div class="field">
<%= f.label :email %><br />
<%= f.text_field :email %>
</div>
<div class="field">
<%= f.label :body %><br />
<%= f.text_area :body %>
</div>
<div class="actions">
<%= f.submit 'Add' %>
</div>
<% end %>

Answer 1

Rails 4默认使用强参数。你有这样的东西吗？

params.require(:some_param).permit(...)

或

params.permit(:list, :of, :allowed, :params)

在你的CommentsController里

看起来会是这样的：

class CommentsController < ApplicationController

  def create
    @comment = @article.comments.new(comment_params) #error point highlight this line
  end

  private

  def comment_params
    params.require(:comment).permit(:name, :email, :body)
  end

end