Skip to content

Instantly share code, notes, and snippets.

@jewilmeer

jewilmeer/environment.rb

Created January 11, 2013 11:17
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jewilmeer/4509974 to your computer and use it in GitHub Desktop.
Save jewilmeer/4509974 to your computer and use it in GitHub Desktop.
Download ZIP
Securityfix rails 2.3
Raw
environment.rb
# Make sure we are secure, see https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/61bkgvnSGTQ
ActiveSupport::CoreExtensions::Hash::Conversions::XML_PARSING.delete('symbol')
ActiveSupport::CoreExtensions::Hash::Conversions::XML_PARSING.delete('yaml')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment