Strong parameters for Block

app/controllers/blocks_controller.rb

@@ -4,7 +4,7 @@ class BlocksController < ApplicationController
   respond_to :html, :json
 
   def create
-    block = current_user.blocks.new(params[:block])
+    block = current_user.blocks.new(block_params)
 
     if block.save
       disconnect_if_contact(block.person)
@@ -39,4 +39,8 @@ class BlocksController < ApplicationController
       current_user.disconnect(contact, :force => true)
     end
   end
+
+  def block_params
+    params.require(:block).permit(:person_id)
+  end
 end

app/models/block.rb

 class Block < ActiveRecord::Base
+  include ActiveModel::ForbiddenAttributesProtection
+  
   belongs_to :person
   belongs_to :user