Re:SQL Injection Vulnerability in Ruby on Rails; affects all...
by tptacek on Wednesday January 02, 2013 @10:19PM
(#5000880)
No; the theory behind that attack is, Rails doesn't GC symbols, so you could just repeatedly stuff requests that created new symbols until memory was exhausted. I don't care about that attack (there are others like it), but it's viable.
[ Parent
| on HN ]
There are no comments on this comment yet.