diff options
| author | MrBrdo <mrbrdo@gmail.com> | 2012-06-08 00:08:51 +0200 |
|---|---|---|
| committer | Jan Berdajs <mrbrdo@gmail.com> | 2012-06-14 18:10:49 +0200 |
| commit | bc7c0b5c108ef47b24bb91c502429935bb34d214 (patch) | |
| tree | 8080f11a0fa497eec595df065894f36b2db1a8af /guides/source/active_model_basics.textile | |
| parent | f278b067891b3a3e3462e92ada72e8dc5f24797b (diff) | |
| download | rails-bc7c0b5c108ef47b24bb91c502429935bb34d214.tar.gz rails-bc7c0b5c108ef47b24bb91c502429935bb34d214.tar.bz2 rails-bc7c0b5c108ef47b24bb91c502429935bb34d214.zip | |
prevent users from unknowingly using bad regexps that can compromise security (http://homakov.blogspot.co.uk/2012/05/saferweb-injects-in-various-ruby.html)
Diffstat (limited to 'guides/source/active_model_basics.textile')
| -rw-r--r-- | guides/source/active_model_basics.textile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/active_model_basics.textile b/guides/source/active_model_basics.textile index d373f4ac85..7cafff2ad8 100644 --- a/guides/source/active_model_basics.textile +++ b/guides/source/active_model_basics.textile @@ -187,7 +187,7 @@ class Person attr_accessor :name, :email, :token validates :name, :presence => true - validates_format_of :email, :with => /^([^\s]+)((?:[-a-z0-9]\.)[a-z]{2,})$/i + validates_format_of :email, :with => /\A([^\s]+)((?:[-a-z0-9]\.)[a-z]{2,})\z/i validates! :token, :presence => true end |