Params Protection In this release, we’ve added support for first-class params protection from mass-assignment. This means that Padrino now has controller-level protection allowing the user to filter the params that are accepted for a request. Whitelisting params which can be accepted into your controller action requires use of the new params key for routes: controller :posts, :params => [ :id ] do