Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There are other workarounds, too. You could disable XML parameter parsing, for example (as seen here: https://groups.google.com/forum/?fromgroups=#!topic/rubyonra...).

Thus, you might be running an old version, but still actually be safe by disabling the vulnerable bits.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: