rails/rails — comment on commit b83965785db1eec019edf1fc272b1aa393e6dc57
File:  line 0
By bashcoder:

@sysprv - exactly - this completely debunks the arguments made against @homakov over the past few days. The 'newbie' argument falls flat when an elite group of coders can so easily fall prey to this issue. Meanwhile, rails takes credit for handling cross-site-scripting, sql injection and other "newbie mistakes."

No matter what anybody says, this is a "call-the-neighbors-and-wake-the-kids" kind of issue. It will be interesting to see how many gems get updated this week.