News for hackers. Stuff that matters.

A comment on Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3. Parent comment

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by justsee on Monday January 28, 2013 @06:05PM (#5131315)
Interesting.

Rails: numerous code execution and SQL injection vulnerabilities reported over the years.

Django: no code execution or SQL injection vulnerabilities reported.

[ Parent | on HN ]
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by sil3ntmac on Monday January 28, 2013 @06:21PM (#5131397)
(yet).
[ Parent | on HN ]
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by tedunangst on Monday January 28, 2013 @09:50PM (#5132075)
To be honest, rails does seem to be going out of its way to increase its attack surface.
[ Parent | on HN ]