News for hackers. Stuff that matters.

A comment on SQL Injection Vulnerability in Ruby on Rails; affects all versions.

Re:SQL Injection Vulnerability in Ruby on Rails; affects all... by NoPiece on Wednesday January 02, 2013 @06:03PM (#4999893)
So it only the only the dynamic finders (find_by_) that have the vulnerability, not Model.find(params[:id])?
[ Parent | on HN ]
Re:SQL Injection Vulnerability in Ruby on Rails; affects all... by colinyoung on Wednesday January 02, 2013 @06:12PM (#4999937)
Yes, it's the dynamic matchers only.
[ Parent | on HN ]