|
|
|
|
|
|
by marshray
5216 days ago
|
|
|
I'm an experienced developer, but not terribly familiar with Rails. What do you mean "properly deploy their app"? The sample code at rubyonrails.org looks like it has the same problem to me, i.e., it would be vulnerable if it were put into production in the right (entirely reasonable) circumstances. |
|
|
No matter how bad the tool actually is, only a terrible craftsman blames his tools. That's what he meant.
Both Rails and GH are at fault. Rails for not discouraging poor practices and GH for not being more familiar with their own stack.