Thanks, that makes sense. Now that I'm back from code4lib, I'll take a closer look and see what's happening in Rails. It would surprise me if Rails let us do something that insecure out-of-the-box without a little warning in the documentation somewhere.