Merge pull request rails#6676 from aurelian/master

Don't assign the attributes if the list is empty

Author: rafaelfranca

activerecord/lib/active_record/attribute_assignment.rb

@@ -64,7 +64,7 @@ def attributes=(new_attributes)
     #   user.name       # => "Josh"
     #   user.is_admin?  # => true
     def assign_attributes(new_attributes, options = {})
-      return unless new_attributes
+      return if new_attributes.blank?
 
       attributes = new_attributes.stringify_keys
       multi_parameter_attributes = []

activerecord/test/cases/mass_assignment_security_test.rb

@@ -98,6 +98,10 @@ def test_mass_assigning_does_not_choke_on_nil
     Firm.new.assign_attributes(nil)
   end
 
+  def test_mass_assigning_does_not_choke_on_empty_hash
+    Firm.new.assign_attributes({})
+  end
+
   def test_assign_attributes_uses_default_role_when_no_role_is_provided
     p = LoosePerson.new
     p.assign_attributes(attributes_hash)