String is vulnerable too. You'd be hard pressed to write a useful program that didn't put user-provided data into Strings. An attacker could study the code pat

String is vulnerable too. You'd be hard pressed to write a useful program that didn't put user-provided data into Strings. An attacker could study the code paths of popular ruby based open-source projects to craft special attack inputs that exploit the weaknesses in Array and/or String.