Here's a ticket now though. https://rails.lighthouseapp.com/projects/8994/tickets/2755-security-hole-found-in-rails-23s-http_authenticationrb https://rails.lig

Here's a ticket now though. https://rails.lighthouseapp.com/projects/8994/tickets/2755-security-hole-found-in-rails-23s-http_authenticationrb https://rails.lighthouseapp.com/projects/8994/tickets/2755-s... And I've also put it up on rubyflow.