3 ms·
I vaguely remember an article about a fatal flaw in Ruby on Rails that was said to be not fixable? Is that ancient history and has been overcome, or was it not
by raintrees 7y ago
I vaguely remember an article about a fatal flaw in Ruby on Rails that was said to be not fixable? Is that ancient history and has been overcome, or was it not even a thing and I read bogus information?
I have developed in Django and avoided RoR due to this possibility, but am always interested in learning more, provided the tools have a decent shelf life...
- castwide 7y agoYou might be thinking of an old SQL injection vulnerability that allowed updating models from unchecked request parameters, aka the mass assignment problem[0]. That type of thing can be a concern in any web application, regardless of the framework. Modern Rails does a decent job of discouraging it out of the box. [0] https://arstechnica.com/information-technology/2012/03/hacker-commandeers-github-to-prove-vuln-in-ruby/ https://arstechnica.com/information-technology/2012/03/hacke...