Re: CSRF Protection Bypass in Ruby on Rails - I don''t get it ...

Michael Pavling
Wed, 09 Feb 2011 20:48:53 -0000

On 9 February 2011 16:18, Xavier Noria
<fxn-xlncskNFVEJBDgjK7y7TUQ@public.gmane.org>
wrote:
>> I understood the suggestion to post on core as a better way to get
>> clarification rather than a suggestion that it should not have been
>> posted here.
>
> Exactly :).

Ah! Well I was confused, as you replied to my post (with no questions
asked) rather than to Siebert''s OP. I was just musing back to the list
with my own considerations on the alert... and had I cross posted to
core, those guys would''ve got stroppy :-D


On 9 February 2011 15:47, Colin Law
<clanlaw-gM/Ye1E23mwN+BqQ9rBEUg@public.gmane.org>
wrote:
>> Top-posted from Android
>
> Excuses, excuses... :)

yeah.... I do try to not post from my phone, but sometimes you just
wanna bash out a reply. Still... knowing I''m in the wrong is no excuse
for doing it - am appropriately chastened :-(
Why couldn''t Google have just written a little extra functionality
into their OS? hrumph...