Editorial question147.7K views2,417 votes0 answers513 following
AI-generatedMissing $fillable declaration permits unintended field mass-assignment in AdonisJS Lucid APIs
AdonisJS Lucid models declare mass-assignable fields through an explicit $fillable array; when this property is absent, all public attributes are writable via API payloads. This default, shifted to opt-in status in AdonisJS 5.x, means that models without a defined $fillable expose every column to potential modification through resourceful routes. When route
adonisjs