I think Rails 3 does escaping by default, no? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		grandalf on Aug 25, 2009 \| parent \| context \| favorite \| on: Massive Twitter Cross-Site Scripting Vulnerability I think Rails 3 does escaping by default, no?

al3x on Aug 25, 2009 [–]

They're working on it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact