similar to: On the total nondisclosure of the 8/9/06 security vulnerability

Hi, I think there is still a major vulnerability exists in the latest Rails 1.1.5. The problem is in the routing.rb file and safe_load_paths method. Because of the erroneous regexp it is possible to perform a DOS attack on any rails application. To reproduce: 1. start your application 2. use this url: http://localhost:3000/debug Routing module will load standard debug.rb script which stops a

Hello all, Having a problem with the Rspec textmate bundle and having quizzed the guys in #textmate to no success about the errors, I''ve been suggested to try you guys! When I run the "Run Behaviour Description" command, I get the following errors: /Users/alastair/Library/Application Support/TextMate/Bundles/ RSpec.tmbundle/Support/lib/spec/../spec/mate/runner.rb:34:in

Hey there, I got a new workstation going on here an Intel iMac, and I''ve compiled and installed everything with intel binaries. Everything works fine, I even got that cool clever lighttpd script running (http://www.bigbold.com/snippets/posts/show/303). But the one thing that doesn''t work is breakpoints and the breakpointer script. When I run script/breakpointer, I get the

Hi all, Just wondering... Are there any plans to include i18n support in Rails anytime soon? I guess this is about the only feature I''m realy missing in Rails. Any thoughts? Regards, Harm de Laat -------------- next part -------------- An HTML attachment was scrubbed... URL: http://wrath.rubyonrails.org/pipermail/rails/attachments/20060130/63681052/attachment.html

I keep getting: No connection to breakpoint service at druby://localhost:42531 (DRb::DRbConnError) Tries to connect will be made every 3 seconds... This happens every time i run ./script/breakpointer using 0.9.5 on OSX or Windows. Any ideas?

Hey guys, I''m trying to get rSpec (rev 2996) working with Rails 2 (rev 8214). Running the tests from the command line works, no problem. I installed the RSpec.tmbundle (also rev 2996), and would like to see the HTML test results in TextMate. When I run the "Run examples in selected files/directories" command in TextMate, I get the following dump:

I''m referring to the vendor folder under activesupport/lib/ active_support folder. Are we supposed to be making changes to the files in this folder? I just submitted my first patch (a doc patch) to a file in this folder, and I just realized it could be an external project. Then I noticed the XML Builder project in RubyForge. I also just noticed that most of the files under the builder

I know I must be doing something dumb, but I can''t seem to send a local variable to my partial. The below code leads to the following error: NameError in Residential_listings#new undefined local variable or method `foo'' for #<ActionView::Base: 0x3fb53f8> I am trying to call the variable ''foo'' in a partial called _attachment.html.erb, which is nested in

Thanks for any help you can offer. I am trying to send out a small batch of emails using an http request. I know it sounds odd. hear me out. I have loaded a bunch of emails into this table and just want to slowly work through them. Sort of a poor mans AR:Mailer. But I am getting a "can''t dup NilClass" when I hit it with a http request. **********************************

I have a form with contingent select boxes (the state is contingent on the country selected, so when the country selected changes, the state changes -- I am using the Carmen plugin for getting my state names and country names together, but not the functionality I am interested in achieving). Everything works fine except I cannot figure out how to amend my code such that: A. When the form is first

Hi, When I upgraded my rails application to rails 2.3.2 I am getting error ''can''t modify frozen hash'' on using @something.update_attribute(params[:something]). Can anyone help me who is familiarize with this bug? Thanks,

Is Rails a good place to start for a newb to the database world ?? I need to make a database that is searchable with multiple filters that can be turned on and off at a moments notice kinda like java xhtml dynamic loading.. I have not worked with php or mysql much more than basic scripts running and website defaults. so I am new to the racket and want to pick something that is robust and

can anyone help with this??? /!\ FAILSAFE /!\ Thu Apr 08 16:58:27 -0700 2010 Status: 500 Internal Server Error unknown error C:/Ruby/lib/ruby/1.8/dl/import.rb:29:in `initialize'' C:/Ruby/lib/ruby/1.8/dl/import.rb:29:in `dlopen'' C:/Ruby/lib/ruby/1.8/dl/import.rb:29:in `dlload'' C:/Ruby/lib/ruby/1.8/dl/import.rb:27:in `each''

Hi, I installed rails 0.10 with ruby gem, and upgraded my application as described at http://manuals.rubyonrails.com/read/book/15 . Now, when accessing the action index of the controller rss_feed, I get this error in the terminal when I started the server: #<NameError: uninitialized constant Class::Object>

An excerpt from the recently-unearthed diary of Doctor Hans Zarkov: "There''s no sun! It''s 8:24 in the morning, and there''s no sun! There is a patch in the Engines release branch now (Changeset #415: http://dev.rails-engines.org/repository/changesets/415), which should work with Rails 1.1.6, and hopefully all Rails 1.1.x versions. Do you want to live forever?

Hi All, I installed ruby184-20 and rubygems-0.9.0 on my computer. When I tried to run C:\ruby>gem install rails --include-dependencies, it showed the following message: Bulk updating Gem source index for: http://gems.rubyforge.org ERROR: While executing gem ... (Gem::GemNotFoundException) Could not find actionpack (= 1.12.4) in the repository Could any one help to solve the above

Hi folks! I''ve been experimenting an error messagem when I try to run unity test in any model of my project. Here it is: /home/fabricio/shopcell/config/environment.rb:1:in `require'': no such file to load -- active_record/version (LoadError) from /home/fabricio/shopcell/config/environment.rb:1 from ./test/test_helper.rb:2:in `require'' from ./test/test_helper.rb:2

Hi, I've been trying to listen to the BBC's ogg broadcasts over a 56Kbps modem and have had problems. I can listen to the archived shows, but I get occasonal pauses. I assume this can be fixed by pre-loading a large enough buffer. But when I try listening to the Radio-4 stream, the buffer fills, then I get sound and for maybe 5 more seconds I continue to get modem traffic. Then the

Hi, I''ve got a Rails app working that includes two two classes, etc.: Expense & Vendor. I eventually learned that the mental concept I had of their relationship should be express in Rails as: class Expense < ActiveRecord::Base; belongs_to :vendor; end class Vendor < ActiveRecord::Base; has_many :expenses; end

Hi, I am a Newbie to Mac and Rails. I have a rails apps made using instantrails in windows, and have been trying to transfer it to a mac. I am using Leopard and installed mac ports and Xcode. I copied the folder from rails_apps and added all the gems. Anything else I need to do? Any Ideas? Thank you! This is the set of errors that I am getting after starting the server: Exiting