4 ms·
It's probably a good idea to subscribe to rails-security. https://groups.google.com/forum/?fromgroups#!forum/rubyonrails-security https://groups.google.com/for
by jarin 14y ago
It's probably a good idea to subscribe to rails-security.
https://groups.google.com/forum/?fromgroups#!forum/rubyonrails-security https://groups.google.com/forum/?fromgroups#!forum/rubyonrai...
I probably wouldn't allow a production app to update itself without human intervention.
- eggbrain 14y agoThe whole issue is that Rails has tried to package what's 'probably a good idea' into the framework by default for quite a while. Unless every guide ever tells you to subscribe to the rails-security group, only those 'in the know' will know to do so. What's better, to have access to these updates by default, or having half the Rails apps out there potentially being compromised?