3 ms·
Is it possible to update the title of this post to remove the "affecting JRuby users" portion? The current title will give non-JRuby users a false sense of sec
by matthuggins 14y ago
Is it possible to update the title of this post to remove the "affecting JRuby users" portion? The current title will give non-JRuby users a false sense of security.
- cheald 14y agoThis vulnerability is only applicable to JRuby users who use the JDOM parser. JDOM is not usable on non-JRuby platforms.
- matthuggins 14y agoCVE-2013-1855 & CVE-2013-1857 are applicable to ALL Ruby users, not just JRuby.
- cheald 14y agoOh, I read you now. Since the link goes to just the JRuby-related announcement, I'm going to leave it in place for now, but please go ahead and submit the other two (especially the sanitize() one) - the spam filter seems to be upset at me. :)