Read https://github.com/rails/rails/issues/5228 https://github.com/rails/rails/issues/5228 The vulnerability discoverer tried to explain the dangerousness of t

Read https://github.com/rails/rails/issues/5228 https://github.com/rails/rails/issues/5228 The vulnerability discoverer tried to explain the dangerousness of the bug multiple times... but he was ignored despite attempts to show benign ways to exploit it. So he did the right thing by exploiting the vulnerability to perform a rogue commit to the master Github repo. No one was taking him seriously. Now Github finally fixed it!