diff --git a/config/application.rb b/config/application.rb
index e331adc497..18747bfa0d 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -71,7 +71,7 @@ module OpenProject
     # This will create an empty whitelist of attributes available for mass-assignment for all models
     # in your app. As such, your models will need to explicitly whitelist or blacklist accessible
     # parameters by using an attr_accessible or attr_protected declaration.
-    config.active_record.whitelist_attributes = true
+    config.active_record.whitelist_attributes = false
 
     # Version of your assets, change this if you want to expire all your assets
     config.assets.version = '1.0'