News for hackers. Stuff that matters.
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by aphyr on Monday January 28, 2013 @06:59PM (#5131537)
This is good advice in general, but Rails used the wrong kind of parser for this kind of data. JSON is not YAML. A YAML parser does not provide the same guarantees as a JSON parser about its output. It doesn't matter if both parsers are completely correct if you use them inappropriately.

There are no comments on this comment yet.