Set AC::Parameters.permit_all_parameters explicitly to false when...

Set AC::Parameters.permit_all_parameters explicitly to false when config.action_controller.permit_all_parameters is not present

actionpack/lib/action_controller/railtie.rb

@@ -20,7 +20,7 @@ class Railtie < Rails::Railtie #:nodoc:
     end
 
     initializer "action_controller.parameters_config" do |app|
-      ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters)
+      ActionController::Parameters.permit_all_parameters = app.config.action_controller.delete(:permit_all_parameters) { false }
     end
 
     initializer "action_controller.set_configs" do |app|