3 ms·
Don't be so sure with this one. They only disclosed the `create_with` issue, but `where(params).create` was also vulnerable. Unfortunately, the latter is much h
by stouset 12y ago
Don't be so sure with this one. They only disclosed the `create_with` issue, but `where(params).create` was also vulnerable. Unfortunately, the latter is much harder to search for and more likely to be used since `where` is seemingly safe.
- scott_karana 12y agoI have a very, very small codebase for my single application, so I'm sure: RoR beginner here, it's my first project. ;) But that's a pretty thoughtful warning for others, upvoted!