12375 today
    Ruby on Rails String Interpolation led to Remote Code Execution

    Ruby on Rails String Interpolation led to Remote Code Execution

    13-Mar-2017 3671
    @nahamsec and I discovered a Cross-Site Scripting vulnerability a few months ago related to Rails typecasting request variables into JSON. This caused the output to be JSON formatted and the JSON indexes would avoid XSS encoding. We decided to run with this concept and explore the rest of the website to see if we could identify other vulnerabilities using the same method.
    Read more /
    Use coupon code:

    RUBYONRAILS

    to get 30% discount on our bundle!
    Prepare for your next tech interview with our comprehensive collection of programming interview guides. Covering JavaScript, Ruby on Rails, React, and Python, these highly-rated books offer thousands of essential questions and answers to boost your interview success. Buy our 'Ultimate Job Interview Preparation eBook Bundle' featuring 2200+ questions across multiple languages. Ultimate Job Interview Preparation eBook Bundle

    Bestseller

    Ruby Interview Questions

    Tags

    #Ruby #on #Rails #String #Interpolation #led #to #Remote #Code #Execution #code

    Related Links

    David Heinemeier Hansson about programming as art
    mrsked/mrsk: Deploy web apps anywhere.
    Getting Started with the Sorbet Type Checker in Rails
    Rails 7 adds better support for custom enum types in PostgreSQL | Saeloun Blog
    AkitaOnRails - The Ruby Community and Reputation

    Useful Links

    Quick Links

    Get in Touch

    Ruby On Rails Bosnia

    [email protected]

    [5037, 8385, 16172, 10673, 7370, 4991, 4493]

    Ruby On Rails Bosnia © 2016

    Template By HTML Codex