3 ms·
You need a way to inject symbols as hash keys. Normal parameter handling does not allow this, so you need a different way to exploit the bug. As venus says, s
by tenderlove 14y ago
You need a way to inject symbols as hash keys. Normal parameter handling does not allow this, so you need a different way to exploit the bug. As venus says, session forging is one way. Regular parameter handling is not.
- chrismsnz 14y agoI will defer to the rails core dev here :) The linked vuln report gives the impression that regular parameter handling is vulnerable.