info
discussion
exploit
solution
references
Ruby on Rails To_JSON Script Injection Vulnerability
References:
Ruby on Rails Homepage
(Ruby on Rails)
Ticket #8371
(Ruby on Rails)
Ticket #8371 to_json cross site scripting security issue (XSS)
(Rails Trac)
Privacy Statement
Copyright 2010, SecurityFocus