reproduce ForbiddenAttributesError

Demonstrate regression introduced by https://github.com/rails/rails/pull/9860

bundle exec /home/rubys/git/rails/railties/bin/rails new demo --skip-bundle
      create  
      create  README.rdoc
      create  Rakefile
      create  config.ru
      create  .gitignore
      create  Gemfile
      create  app
      create  app/assets/javascripts/application.js
      create  app/assets/stylesheets/application.css
      create  app/controllers/application_controller.rb
      create  app/helpers/application_helper.rb
      create  app/views/layouts/application.html.erb
      create  app/assets/images/.keep
      create  app/mailers/.keep
      create  app/models/.keep
      create  app/controllers/concerns/.keep
      create  app/models/concerns/.keep
      create  bin
      create  bin/bundle
      create  bin/rails
      create  bin/rake
      create  config
      create  config/routes.rb
      create  config/application.rb
      create  config/environment.rb
      create  config/environments
      create  config/environments/development.rb
      create  config/environments/production.rb
      create  config/environments/test.rb
      create  config/initializers
      create  config/initializers/backtrace_silencers.rb
      create  config/initializers/filter_parameter_logging.rb
      create  config/initializers/inflections.rb
      create  config/initializers/mime_types.rb
      create  config/initializers/secret_token.rb
      create  config/initializers/session_store.rb
      create  config/initializers/wrap_parameters.rb
      create  config/locales
      create  config/locales/en.yml
      create  config/boot.rb
      create  config/database.yml
      create  db
      create  db/seeds.rb
      create  lib
      create  lib/tasks
      create  lib/tasks/.keep
      create  lib/assets
      create  lib/assets/.keep
      create  log
      create  log/.keep
      create  public
      create  public/404.html
      create  public/422.html
      create  public/500.html
      create  public/favicon.ico
      create  public/robots.txt
      create  test/fixtures
      create  test/fixtures/.keep
      create  test/controllers
      create  test/controllers/.keep
      create  test/mailers
      create  test/mailers/.keep
      create  test/models
      create  test/models/.keep
      create  test/helpers
      create  test/helpers/.keep
      create  test/integration
      create  test/integration/.keep
      create  test/test_helper.rb
      create  tmp/cache
      create  tmp/cache/assets
      create  vendor/assets/javascripts
      create  vendor/assets/javascripts/.keep
      create  vendor/assets/stylesheets
      create  vendor/assets/stylesheets/.keep
bundle install --local
Resolving dependencies...
Using rake (10.1.0) 
Using i18n (0.6.5) 
Using json (1.8.0) 
Using minitest (5.0.8) 
Using atomic (1.1.14) 
Using thread_safe (0.1.3) 
Using tzinfo (0.3.37) 
Using activesupport (4.1.0.beta) from source at /home/rubys/git/rails 
Using rack (1.5.2) 
Using rack-test (0.6.2) 
Using actionpack (4.1.0.beta) from source at /home/rubys/git/rails 
Using builder (3.1.4) 
Using activemodel (4.1.0.beta) from source at /home/rubys/git/rails 
Using erubis (2.7.0) 
Using actionview (4.1.0.beta) from source at /home/rubys/git/rails 
Using mime-types (1.25) 
Using polyglot (0.3.3) 
Using treetop (1.4.15) 
Using mail (2.5.4) 
Using actionmailer (4.1.0.beta) from source at /home/rubys/git/rails 
Using arel (4.0.0.20130418133826) from source at /home/rubys/git/arel 
Using activerecord (4.1.0.beta) from source at /home/rubys/git/rails 
Using bundler (1.3.5) 
Using coffee-script-source (1.6.3) 
Using execjs (2.0.1) 
Using coffee-script (2.2.0) 
Using thor (0.18.1) 
Using railties (4.1.0.beta) from source at /home/rubys/git/rails 
Using coffee-rails (4.0.0) from source at /home/rubys/git/coffee-rails 
Using hike (1.2.3) 
Using multi_json (1.8.0) 
Using jbuilder (1.5.1) 
Using jquery-rails (3.0.4) 
Using tilt (1.4.1) 
Using sprockets (2.10.0) 
Using sprockets-rails (2.0.0) from source at /home/rubys/git/sprockets-rails 
Using rails (4.1.0.beta) from source at /home/rubys/git/rails 
Using rdoc (3.12.2) 
Using sass (3.2.10) 
Using sass-rails (4.0.0) from source at /home/rubys/git/sass-rails 
Using sdoc (0.3.20) 
Using sqlite3 (1.3.8) 
Using turbolinks (1.3.0) 
Using uglifier (2.2.1) 
Using web-console (1.0.2) 
Your bundle is complete!
Use `bundle show [gemname]` to see where a bundled gem is installed.

A standard product/lineItem/cart model

rails generate scaffold product title
      invoke  active_record
      create    db/migrate/20130924170454_create_products.rb
      create    app/models/product.rb
      invoke    test_unit
      create      test/models/product_test.rb
      create      test/fixtures/products.yml
      invoke  resource_route
       route    resources :products
      invoke  scaffold_controller
      create    app/controllers/products_controller.rb
      invoke    erb
      create      app/views/products
      create      app/views/products/index.html.erb
      create      app/views/products/edit.html.erb
      create      app/views/products/show.html.erb
      create      app/views/products/new.html.erb
      create      app/views/products/_form.html.erb
      invoke    test_unit
      create      test/controllers/products_controller_test.rb
      invoke    helper
      create      app/helpers/products_helper.rb
      invoke      test_unit
      create        test/helpers/products_helper_test.rb
      invoke    jbuilder
      create      app/views/products/index.json.jbuilder
      create      app/views/products/show.json.jbuilder
      invoke  assets
      invoke    coffee
      create      app/assets/javascripts/products.js.coffee
      invoke    scss
      create      app/assets/stylesheets/products.css.scss
      invoke  scss
      create    app/assets/stylesheets/scaffolds.css.scss
rails generate scaffold cart
      invoke  active_record
      create    db/migrate/20130924170456_create_carts.rb
      create    app/models/cart.rb
      invoke    test_unit
      create      test/models/cart_test.rb
      create      test/fixtures/carts.yml
      invoke  resource_route
       route    resources :carts
      invoke  scaffold_controller
      create    app/controllers/carts_controller.rb
      invoke    erb
      create      app/views/carts
      create      app/views/carts/index.html.erb
      create      app/views/carts/edit.html.erb
      create      app/views/carts/show.html.erb
      create      app/views/carts/new.html.erb
      create      app/views/carts/_form.html.erb
      invoke    test_unit
      create      test/controllers/carts_controller_test.rb
      invoke    helper
      create      app/helpers/carts_helper.rb
      invoke      test_unit
      create        test/helpers/carts_helper_test.rb
      invoke    jbuilder
      create      app/views/carts/index.json.jbuilder
      create      app/views/carts/show.json.jbuilder
      invoke  assets
      invoke    coffee
      create      app/assets/javascripts/carts.js.coffee
      invoke    scss
      create      app/assets/stylesheets/carts.css.scss
      invoke  scss
   identical    app/assets/stylesheets/scaffolds.css.scss
rails generate scaffold LineItem product:references cart:belongs_to
      invoke  active_record
      create    db/migrate/20130924170458_create_line_items.rb
      create    app/models/line_item.rb
      invoke    test_unit
      create      test/models/line_item_test.rb
      create      test/fixtures/line_items.yml
      invoke  resource_route
       route    resources :line_items
      invoke  scaffold_controller
      create    app/controllers/line_items_controller.rb
      invoke    erb
      create      app/views/line_items
      create      app/views/line_items/index.html.erb
      create      app/views/line_items/edit.html.erb
      create      app/views/line_items/show.html.erb
      create      app/views/line_items/new.html.erb
      create      app/views/line_items/_form.html.erb
      invoke    test_unit
      create      test/controllers/line_items_controller_test.rb
      invoke    helper
      create      app/helpers/line_items_helper.rb
      invoke      test_unit
      create        test/helpers/line_items_helper_test.rb
      invoke    jbuilder
      create      app/views/line_items/index.json.jbuilder
      create      app/views/line_items/show.json.jbuilder
      invoke  assets
      invoke    coffee
      create      app/assets/javascripts/line_items.js.coffee
      invoke    scss
      create      app/assets/stylesheets/line_items.css.scss
      invoke  scss
   identical    app/assets/stylesheets/scaffolds.css.scss
rake db:migrate
mv 20130924170454_create_products.rb 20130924000001_create_products.rb
mv 20130924170456_create_carts.rb 20130924000002_create_carts.rb
mv 20130924170458_create_line_items.rb 20130924000003_create_line_items.rb
==  CreateProducts: migrating =================================================
-- create_table(:products)
   -> 0.0026s
==  CreateProducts: migrated (0.0027s) ========================================
 
==  CreateCarts: migrating ====================================================
-- create_table(:carts)
   -> 0.0011s
==  CreateCarts: migrated (0.0011s) ===========================================
 
==  CreateLineItems: migrating ================================================
-- create_table(:line_items)
   -> 0.0031s
==  CreateLineItems: migrated (0.0032s) =======================================
 
rake test
Run options: --seed 33580
 
# Running:
 
E.....E..............
 
Finished in 0.928489s, 22.6174 runs/s, 36.6187 assertions/s.
 
  1) Error:
CartsControllerTest#test_should_create_cart:
ActiveModel::ForbiddenAttributesError: ActiveModel::ForbiddenAttributesError
    app/controllers/carts_controller.rb:27:in `create'
    test/controllers/carts_controller_test.rb:21:in `block (2 levels) in <class:CartsControllerTest>'
    test/controllers/carts_controller_test.rb:20:in `block in <class:CartsControllerTest>'
 
 
  2) Error:
CartsControllerTest#test_should_update_cart:
ActiveModel::ForbiddenAttributesError: ActiveModel::ForbiddenAttributesError
    app/controllers/carts_controller.rb:44:in `block in update'
    app/controllers/carts_controller.rb:43:in `update'
    test/controllers/carts_controller_test.rb:38:in `block in <class:CartsControllerTest>'
 
21 runs, 34 assertions, 0 failures, 2 errors, 0 skips
should have zero errors.
<0> expected to be
>=
<1>.

Traceback:
  update_attributes.rb:21:in `block (2 levels) in <class:UpdateAttributesTest>'
  /home/rubys/git/gorp/lib/gorp/test.rb:157:in `call'
  /home/rubys/git/gorp/lib/gorp/test.rb:157:in `block (2 levels) in <class:TestCase>'
  update_attributes.rb:20:in `block in <class:UpdateAttributesTest>'

Environment

Tue, 24 Sep 2013 17:05:02 GMT
git log -1
commit f55e178f0307aa2d2a8baae02869b78e3ea3c5b4
Merge: 16c7873 344882e
Author: Guillermo Iguaran <guilleiguaran@gmail.com>
Date:   Tue Sep 24 08:29:10 2013 -0700

    Merge pull request #11667 from gsamokovarov/introduce-web-console
    
    Include web-console in new projects Gemfile
rake about
About your application's environment
Ruby version              2.0.0-p247 (x86_64-linux)
RubyGems version          2.0.7
Rack version              1.5
Rails version             4.1.0.beta
JavaScript Runtime        Node.js (V8)
Active Record version     4.1.0.beta
Action Pack version       4.1.0.beta
Action View version       4.1.0.beta
Action Mailer version     4.1.0.beta
Active Support version    4.1.0.beta
Middleware                Rack::Sendfile,
                          ActionDispatch::Static,
                          Rack::Lock,
                          #<ActiveSupport::Cache::Strategy::LocalCache::Middleware:0x00000003580540>,
                          Rack::Runtime,
                          Rack::MethodOverride,
                          ActionDispatch::RequestId,
                          Rails::Rack::Logger,
                          ActionDispatch::ShowExceptions,
                          ActionDispatch::DebugExceptions,
                          ActionDispatch::RemoteIp,
                          ActionDispatch::Reloader,
                          ActionDispatch::Callbacks,
                          ActiveRecord::Migration::CheckPending,
                          ActiveRecord::ConnectionAdapters::ConnectionManagement,
                          ActiveRecord::QueryCache,
                          ActionDispatch::Cookies,
                          ActionDispatch::Session::CookieStore,
                          ActionDispatch::Flash,
                          ActionDispatch::ParamsParser,
                          Rack::Head,
                          Rack::ConditionalGet,
                          Rack::ETag
Application root          /var/www/rtest/work/demo
Environment               development
Database adapter          sqlite3
Database schema version   20130924000003
bundle show
Gems included by the bundle:
  * actionmailer (4.1.0.beta)
  * actionpack (4.1.0.beta)
  * actionview (4.1.0.beta)
  * activemodel (4.1.0.beta)
  * activerecord (4.1.0.beta)
  * activesupport (4.1.0.beta)
  * arel (4.0.0.20130418133826 bd6adc8)
  * atomic (1.1.14)
  * builder (3.1.4)
  * bundler (1.3.5)
  * coffee-rails (4.0.0 c812f4d)
  * coffee-script (2.2.0)
  * coffee-script-source (1.6.3)
  * erubis (2.7.0)
  * execjs (2.0.1)
  * hike (1.2.3)
  * i18n (0.6.5)
  * jbuilder (1.5.1)
  * jquery-rails (3.0.4)
  * json (1.8.0)
  * mail (2.5.4)
  * mime-types (1.25)
  * minitest (5.0.8)
  * multi_json (1.8.0)
  * polyglot (0.3.3)
  * rack (1.5.2)
  * rack-test (0.6.2)
  * rails (4.1.0.beta f55e178)
  * railties (4.1.0.beta)
  * rake (10.1.0)
  * rdoc (3.12.2)
  * sass (3.2.10)
  * sass-rails (4.0.0 4c58b43)
  * sdoc (0.3.20)
  * sprockets (2.10.0)
  * sprockets-rails (2.0.0 1802687)
  * sqlite3 (1.3.8)
  * thor (0.18.1)
  * thread_safe (0.1.3)
  * tilt (1.4.1)
  * treetop (1.4.15)
  * turbolinks (1.3.0)
  * tzinfo (0.3.37)
  * uglifier (2.2.1)
  * web-console (1.0.2)
gem -v
2.0.7
/home/rubys/.rvm/rubies/ruby-2.0.0-p247/bin/ruby -v
ruby 2.0.0p247 (2013-06-27 revision 41674) [x86_64-linux]
rvm -v
rvm 1.22.11 (stable) by Wayne E. Seguin <wayneeseguin@gmail.com>, Michal Papis <mpapis@gmail.com> [https://rvm.io/]
nodejs -v
v0.6.19
echo $PATH
/home/rubys/.rvm/gems/ruby-2.0.0-p247/bin
/home/rubys/.rvm/gems/ruby-2.0.0-p247@global/bin
/home/rubys/.rvm/rubies/ruby-2.0.0-p247/bin
/home/rubys/.rvm/bin
/home/rubys/bin
/usr/lib/lightdm/lightdm
/usr/local/sbin
/usr/local/bin
/usr/sbin
/usr/bin
/sbin
/bin
/usr/games
/usr/local/games
lsb_release -irc
Distributor ID:	Ubuntu
Release:	12.10
Codename:	quantal
uname -srm
Linux 3.5.0-40-generic x86_64