Rails feature that requires controllers to explicitly permit which params from a request hash can be mass-assigned to models. Nick Sutterer argues Reform (both 2 and 3) makes strong_parameters unnecessary: because a Reform form only reads the properties it declares, any extra keys in the incoming hash are silently ignored, so whitelisting at the controller is redundant.