Rikita Ishikawa

I looked into it as best I could, but could not find a clear reason for not making the default secure. Although ransackable_attributes have been around since the very beginning,...

My apologies. That was not an answer. I looked in issue/PR/commit to see why the default is the current behavior, but could not find it. I wanted to tell you...

I understand. I'll have to look at the values I'm setting, but it looks good.