3 ms·
I was gonna post 'em all, but my second one got auto-dead'd. Probably tripped the spam filter.
by cheald 14y ago
I was gonna post 'em all, but my second one got auto-dead'd. Probably tripped the spam filter.
- matthuggins 14y agoIs it possible to update the title of this post to remove the "affecting JRuby users" portion? The current title will give non-JRuby users a false sense of security.
- cheald 14y agoThis vulnerability is only applicable to JRuby users who use the JDOM parser. JDOM is not usable on non-JRuby platforms.
- matthuggins 14y agoCVE-2013-1855 & CVE-2013-1857 are applicable to ALL Ruby users, not just JRuby.
- cheald 14y agoOh, I read you now. Since the link goes to just the JRuby-related announcement, I'm going to leave it in place for now, but please go ahead and submit the other two (especially the sanitize() one) - the spam filter seems to be upset at me. :)