News for hackers. Stuff that matters.

A comment on Security releases issued. Parent comment

Re:Security releases issued by tptacek on Tuesday February 19, 2013 @05:33PM (#5247548)
It is also a way of burying hair-on-fire security issues, and of encouraging plugin-style development for what is properly considered a piece of core functionality for Rails.
[ Parent | on HN ]
Re:Security releases issued by steveklabnik on Tuesday February 19, 2013 @05:39PM (#5247591)
> It is also a way of burying hair-on-fire security issues,

:/ I'm sorry you feel that way. I can only speak for myself, but I certainly don't want to bury any security issues, I want to fix them.

> what is properly considered a piece of core functionality for Rails.

Maybe automatically parsing XML parameters shouldn't be?

[ Parent | on HN ]