3 ms·
I would love to see an example in the wild of someone taking user input, running some logic on it to create a hash with symbols and then passing it to this find
by amalag 14y ago
I would love to see an example in the wild of someone taking user input, running some logic on it to create a hash with symbols and then passing it to this finder. So far noone can give an example, but Rails developers have proactively found this not very exploitable bug and patched it. Yet the attitude seems to be backwards to me. The attitude should be that an edge cause was proactively fixed and there was no known exploit of this in the wild.
- dasil003 14y agoI'm in agreement it's unlikely, but I think it's important to acknowledge that it's conceivable.