Ruby on Rails Action View Denial of Service (CVE-2013-6414)

This module exploits a Denial of Service (DoS) condition in the handling of MIME caching of Action View. By sending a specially crafted accept header to a rails application, it is possible for it to store the invalid MIME type, and may eventually consume all memory if enough invalid MIMEs are given.

Versions 3.0.0 and other later versions are affected, fixed in 4.0.2 and 3.2.16.

DoS takes a ~~very very~~ long time. Run your rails app and watch the memory usage grow slowly (this is also one of the reasons we decided not to use HttpClient because the send_recv makes it even slower).

I think @todb-r7 really wants this.