Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Michael Koziarski

Michael Koziarski

Coder Guy · Account member

Michael Koziarski's latest activity

Wednesday, March 02 2011
5901 suppress the generation of the authenticity_token div was updated in Ruby on Rails
  • Michael Koziarski
    • State changed from open to wontfix
    by Michael Koziarski at 9:55 PM

    I don't think these concerns justify adding yet another option to form_tag and having to support that forever.

    However we could take a patch which refactors it ...
Wednesday, February 16 2011
6438 request.remote_ip/X-Forwarded-For may not be an IP was updated in Ruby on Rails
  • Michael Koziarski
    • Title changed from rails security bug - request.remote_ip/X-Forwarded-For not sanitized to request.remote_ip/X-Forwarded-For may not be an IP
    by Michael Koziarski at 10:29 PM
  • Michael Koziarski
    • Milestone set to 3.0.5
    • Importance changed from to Low
    by Michael Koziarski at 10:22 PM

    The attack vectors they're talking about there assume no one does any sanitization. SQL Injection, shell script exploits etc only apply if people don't check th...
Tuesday, February 01 2011
6314 accepts_nested_attributes_for was updated in Ruby on Rails
Monday, December 20 2010
3457 ActionController::Caching::Sweeper controller instance is not thread safe was updated in Ruby on Rails
  • Michael Koziarski
    Michael Koziarski commented at 2:37 AM

    I'd take this as fix for 2-3-stable and possibly 3-0-stable. but for master we should probably do this right and have a sweeper instance per controller rather t...
Thursday, December 09 2010
3446 tables_in_string matches literal string containing dot was updated in Ruby on Rails
  • Michael Koziarski
    • State changed from new to wontfix
    by Michael Koziarski at 8:04 PM
  • Michael Koziarski
    Michael Koziarski commented at 7:36 PM

    As Andrew says, I'm loathe to climb further down the rabbit hole of trying to parse SQL with regexps. It's destined to fail.

    If you're bitten by this in 2-3-sta...
Tuesday, November 09 2010
5873 Fix broken Rack params parser in Rails >= 2.3.6 was updated in Ruby on Rails
  • Michael Koziarski
    • Assigned user set to Michael Koziarski
    by Michael Koziarski at 10:41 PM
  • Michael Koziarski
    Michael Koziarski commented at 10:38 PM

    For this one, could we perhaps simply update 2.3.11 to depend on 1.2? Would anything else misbehave?

    The rack team have shown no interest in doing point release...
Monday, November 08 2010
5920 Rails 3 associations eager load of associated classes significantly slows dow... was updated in Ruby on Rails
  • Michael Koziarski
    • Milestone set to 3.x
    • Assigned user set to Michael Koziarski
    • Importance changed from to Low
    by Michael Koziarski at 8:03 PM

    Would be nice to look at this for 3.0.2