[justsee]

Interesting.

Rails: numerous code execution and SQL injection vulnerabilities reported over the years.

Django: no code execution or SQL injection vulnerabilities reported.

[sil3ntmac]

(yet).

[tedunangst]

To be honest, rails does seem to be going out of its way to increase its attack surface.