aboutsummaryrefslogtreecommitdiffstats
path: root/activerecord/lib/active_record/attribute_methods.rb
diff options
context:
space:
mode:
authorMichael Koziarski <michael@koziarski.com>2013-11-30 16:45:23 +1300
committerAaron Patterson <aaron.patterson@gmail.com>2013-12-02 16:44:27 -0800
commit4e9dd5378bd5bfaa095a96068c7d1b7c4f47e1b0 (patch)
treeba544df1b4a7b4794a833bf52a3e081884045edf /activerecord/lib/active_record/attribute_methods.rb
parent0c7ac34aed1845044cd1911e5a775366d7ca41c1 (diff)
downloadrails-4e9dd5378bd5bfaa095a96068c7d1b7c4f47e1b0.tar.gz
rails-4e9dd5378bd5bfaa095a96068c7d1b7c4f47e1b0.tar.bz2
rails-4e9dd5378bd5bfaa095a96068c7d1b7c4f47e1b0.zip
Deep Munge the parameters for GET and POST
The previous implementation of this functionality could be accidentally subverted by instantiating a raw Rack::Request before the first Rails::Request was constructed. Fixes CVE-2013-6417
Diffstat (limited to 'activerecord/lib/active_record/attribute_methods.rb')
0 files changed, 0 insertions, 0 deletions