Setattr bypasses field whitelist

Code reviewHard25 min

Your task

Review this Python user-update endpoint that spreads the request body onto the model.