3 ms·

I imagine there's going to have to be a Rails release to upgrade the Rack versions used?

• steveklabnik 14y ago
  Three things: 1. Some Rails apps shouldn't be affected, since Rails uses its own HMAC stuff to handle this. From the rack homepage: "Some Rails users may not be affected (if they only use Rails managed sessions)." 2. You don't need an upgrade of Rails, just `bundle update rack`. 3. 3-2-stable has already had the rack dependency bumped, so the next release of 3.2 will include a minium of this latest release.