Note the comment about Yaml parsing in 1.1 era rails apps. You'll want to at lea... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cschneid on Jan 10, 2013 \| parent \| context \| favorite \| on: Metasploit Rails 3 Remote Code Execution Hours Awa... Note the comment about Yaml parsing in 1.1 era rails apps. You'll want to at least look into what your app is doing.

thenomad on Jan 12, 2013 [–]

Yeah - my eventual decision was that it wasn't worth the risk. One extremely busy day later, we don't have any active Rails apps.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact