title: What is the solution for Mass Assignment: Insecure Binder Configuration Vulnerability?
body: <p>I have this Controller in Java:</p>
  
  <pre><code>@Controller
  public class AuthenticationController extends AbstractController {
  
    @RequestMapping(value = Constantes.MAPPING_AUTH_BASE_ASP, method = { RequestMethod.POST })
    public String authenticate(@Valid ComunicationWithAspRequest comunicationWithAspRequest, BindingResult result,
        RedirectAttributes redirectAttributes, HttpSession sesion) throws Exception {
      ...
      ...
      ...
    }
  }
  </code></pre>
  
  <p>When I scan my code in Fortify, the object comunicationWithAspRequest causes the Mass Assignment: Insecure Binder Configuration Vulnerability. Is possible to control which HTTP request parameters will be used in the binding process and which ones will be ignored?</p>