| |||||||||||||
GitHub incidents spawns Rails security debateGitHub incidents spawns Rails security debatePosted Mar 27, 2012 17:31 UTC (Tue) by bronson (subscriber, #4806)In reply to: GitHub incidents spawns Rails security debate by jwakely Parent article: GitHub incidents spawns Rails security debate
I agree with what you said. But that's quite different from this:
> Rails basically gives the whole world read/write access to your database by default, by design.
If that were true, Rails sites would be getting pwned left and right.
I'd guess Model.new(params[:model]) isn't used in many production Rails sites. Not in any of the ones I've worked on anyway.
(Log in to post comments)
|
|||||||||||||