Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by sandofsky on Monday January 28, 2013 @06:16PM (#5131373)

No. I'm basing it on this database:

Django has 16 vulnerabilities of the DoS, XSS, and CSRF variety.

Rails has 37. In addition to DoS, XSS, and CSRF, it has SQL injection and code execution.

That we keep seeing similar vulnerabilities suggests the problem is systemic.

Giving them praise for not sweeping these under the rug is giving someone praise for not being a sociopath.

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by yannski on Monday January 28, 2013 @06:58PM (#5131531)

So what does that mean ? That Rails is twice as popular as Django ?

[ Parent | on HN ]