This is exactly the kind of response that concerns me. I'm looking for concrete Rails-specific issues. I understand that, in theory, Rails may suffer from this

This is exactly the kind of response that concerns me. I'm looking for concrete Rails-specific issues. I understand that, in theory, Rails may suffer from this issue. In practice I've never once seen it. I think Request.Form is an ASP.NET thing. I have no experience there, so I can't comment on it.