Hacker Times
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
venus
on Feb 12, 2013
|
parent
|
context
|
favorite
| on:
Rails 3.2.12, 3.1.11, and 2.3.17 have been release...
Meh. I don't use attr_protected anyway, and neither should anyone else. Security 101 - whitelist, don't blacklist.
That said the JSON issue looks worrying, so an update and redeploy is necessary.
lucisferre
on Feb 12, 2013
[–]
I've already switched to using the strong_parameters gem. I'd recommend it to anyone else starting a new rails 3 project.
venus
on Feb 12, 2013
|
parent
[–]
+1 to this. For new projects I'd probably just go with 4.0 beta though, it's almost ready...
lucisferre
on Feb 12, 2013
|
root
|
parent
[–]
I can't completely agree with that. I spent some time with 4.0 with the intention of building on it but found too many broken Gems to be productive with it. If you don't intend to use many (or any) third-party Gems it's less of a problem.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
That said the JSON issue looks worrying, so an update and redeploy is necessary.