Interesting. Rails: numerous code execution and SQL injection vulnerabilities re... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		justsee on Jan 28, 2013 \| parent \| context \| favorite \| on: Vulnerability in JSON Parser in Ruby on Rails 3.0 ... Interesting. Rails: numerous code execution and SQL injection vulnerabilities reported over the years. Django: no code execution or SQL injection vulnerabilities reported.

sil3ntmac on Jan 28, 2013 [–]

(yet).

tedunangst on Jan 29, 2013 | [–]

To be honest, rails does seem to be going out of its way to increase its attack surface.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact