3 ms·
I agree! I last updated to 4.1.1, and none of the security patches since then have been relevant to my codebase or included gems, so far.
by scott_karana 12y ago
I agree! I last updated to 4.1.1, and none of the security patches since then have been relevant to my codebase or included gems, so far.
- stouset 12y agoDon't be so sure with this one. They only disclosed the `create_with` issue, but `where(params).create` was also vulnerable. Unfortunately, the latter is much harder to search for and more likely to be used since `where` is seemingly safe.
- scott_karana 12y agoI have a very, very small codebase for my single application, so I'm sure: RoR beginner here, it's my first project. ;) But that's a pretty thoughtful warning for others, upvoted!