rails/rails — comment on commit 06a3a8a458e70c1b6531ac53c57a302b162fd736
File:  line 0
By stevenh512:

@aliix regarding documentation, if that's the case, why not really fix this (instead of just for new apps) and call it 3.3.0?

And regarding apps, this is just my personal opinion.. but if I had an app that was vulnerable (I don't, becuase step 1 for me is to drop in an initializer that forces me to use attr_accessible.. but for the sake of argument, if I didn't know any better), I would _much_ rather deal with "a Rails update broke my app" compared to "a vulnerability I wasn't aware of because I followed some bad docs caused my entire app to get owned and now my users are ready to hang me."