Rails parameters marked with an explicit field allowlist before they may be used for mass assignment.