Thanks for the fixes guys. The string of security fix releases go both ways in my head: on the one hand, I'm happy that people are actively tackling the issues

Thanks for the fixes guys. The string of security fix releases go both ways in my head: on the one hand, I'm happy that people are actively tackling the issues as they arise, on the other hand I feel that the handling of JSON, XML and YAML looks overly complicated and that some intrinsic aspects of Rails make it even harder to keep under control (as exemplified by the half-dozen fixes over the past few weeks). Anyway, Rails is now more secure than it was yesterday, that's a great thing so yeah, thank you very much.