5 ms·
The state of Django and Ruby on Rails - one year later
- deleted 13y ago[deleted]
- targusman 13y agoI migth not like Django, but its security is 100x better than Rails. Django fixes stuff right away, and doesn't have any stupid Yaml.load() bullshit.
- fallenhitokiri 13y agoI'm not sure if Djangos YAML-serializer was effected by this bug but TastiePie did (IIRC) use `load` instead of `safe_load` and suffered the exact same issue e.x. You could argue that, no matter how prominent a library is, it does not reflect the actual framework. While this is true people could start arguing that Rails doesn't really have an admin interface and this would change the comparison I did.
- bhauer 13y agoGreat writeup, fallenhitokiri. A shame it didn't see more upvotes when you posted it to get some attention on the home page.
- fallenhitokiri 13y agoThanks :) even if it didn't make on the frontpage I already received two mails from "just starting out developers" who found it useful, so I'm satisfied :)