Hacker News new | ask | show | jobs
by dhh 4566 days ago
It relies on a header, which can't be set through the attack vector, so it's all kosher.
1 comments

Since we are on the same page, could you help me in this discussion with nzkoz? https://github.com/rails/rails/issues/11509 we're talking about different things