These issues need to be nipped very early on before they get too big to handle. Microsoft was stuck in this situation for many years because they had decided to

These issues need to be nipped very early on before they get too big to handle. Microsoft was stuck in this situation for many years because they had decided to favour compatibility over security. Rails now has a wide footprint on the web, and it all makes it even more important to enable it to be properly locked down. I hope this marks a turning point in the way the Rails team think about security. ps At least Rails no longer allows web crawlers to delete resources by issuing GET requests.