Rails vulnerabilities and not Rails'