Date: 08/11/06 (Java Web) Keywords: security Rails has taken the right route and went for full disclosure unlike for example the WordPress team, who still believes in the flawed concept of security by obscurity. After a full assessment of the security vulnerability (details below) Rails team decided they needed yet another emergency patch to fully close the hole. With Rails 1.1.0 through [...]
|