Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Torsten Bühl

Torsten Bühl

Not a member

Torsten Bühl's latest activity

Tuesday, January 18 2011
6299 Possible SQL injection in ActiveRecord limit was updated in Ruby on Rails
  • Torsten Bühl
    Torsten Bühl commented at 10:10 AM

    Ok I've not checked if the value was escaped, I think the best option would be the conversion to integer. Otherwise it will break some apps.
  • Torsten Bühl
    Torsten Bühl commented at 9:05 AM

    Sorry, my conditions_controller.rb looks like (I cannot edit my comment?)

    @conditions = @conditions.limit(params[:limit]) if params[:limit]

    I had to append th...
  • Torsten Bühl
    Torsten Bühl commented at 8:58 AM

    What version of Arel are you using? I have the problem with Arel 2.0.7 where the limit parameter is not converted to an integer resulting in the wrong query:

    co...
Saturday, February 20 2010
4010 Views not reloaded in development mode (rails-3.0.0.beta, devise-1.1pre2, ham... was updated in Ruby on Rails
  • Torsten Bühl
    Torsten Bühl commented at 9:12 PM

    Hi all!

    I have the same problem, the Github issue was by me ;).
    I'm running yesterday's Edge Rails, devise-1.1.pre2 without haml on a windows machine (Ruby 1.9....