Skip to content

Instantly share code, notes, and snippets.

@jeffreyiacono

jeffreyiacono/config_environment.rb

Created January 8, 2013 04:53
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save jeffreyiacono/4481275 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save jeffreyiacono/4481275 to your computer and use it in GitHub Desktop.
Download ZIP
fix Rails vulnerability
Raw
config_environment.rb
# Disable the default XML params parser - its full of holes
ActionDispatch::ParamsParser::DEFAULT_PARSERS.delete(Mime::XML)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment