4 ms·
I'm impressed with how few issues Rails has right now.
by Siecje 12y ago
I'm impressed with how few issues Rails has right now.
- scott_karana 12y agoI agree! I last updated to 4.1.1, and none of the security patches since then have been relevant to my codebase or included gems, so far.
- stouset 12y agoDon't be so sure with this one. They only disclosed the `create_with` issue, but `where(params).create` was also vulnerable. Unfortunately, the latter is much harder to search for and more likely to be used since `where` is seemingly safe.
- scott_karana 12y agoI have a very, very small codebase for my single application, so I'm sure: RoR beginner here, it's my first project. ;) But that's a pretty thoughtful warning for others, upvoted!
- lectrick 12y agoProbably because it's not experiencing a ton of new features right now.