Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Tohru Hashimoto

Tohru Hashimoto

Not a member

Tohru Hashimoto's latest activity

Sunday, November 21 2010
6025 render :json don't escape htmlentities. was created in Ruby on Rails
  • Tohru Hashimoto
    Tohru Hashimoto created the ticket at 7:00 AM

    XSS happend by IE6 and IE7.

    app/controllers/json_controller.rb

    class JsonController < ApplicationController
  def index
    xss = "<script>alert('hoge')</scrip...
Tuesday, November 16 2010
5979 ActiveRecord::Relation#find with class was updated in Ruby on Rails
  • Tohru Hashimoto
    Tohru Hashimoto commented at 3:06 AM

    I tested with ed91716439c2f3472f5545884628d5ebb7c2f890.

    but the same error happened.
  • Tohru Hashimoto
    Tohru Hashimoto created the ticket at 1:35 AM

    behavior changed?

    class Author < ActiveRecord::Base
end 
class Mary
end 
Author.create!(:name => 'Mary')

    In 3.0.1:

    Author.where(:name => Mary).size # => 1

    I...
Friday, August 27 2010
1485 json_escape eats away double quotes was updated in Ruby on Rails
  • Tohru Hashimoto
    • Importance changed from to
    by Tohru Hashimoto at 3:02 AM

    +1 why is not this ticket applied?

    You should use escape_javascript if you want to escape double quotes.