News for hackers. Stuff that matters.

A comment on IOS 6 injecting should_group_accessibility_children to POST requests. Parent comment

Re:IOS 6 injecting should_group_accessibility_children to PO... by untog on Wednesday October 03, 2012 @11:16AM (#4607819)
Just because something is widely used does not mean it is not a security hole. Mass assignment is a security hole, plain and simple- in Rails and anywhere else.
[ Parent | on HN ]

There are no comments on this comment yet.