600 today
    Ruby on Rails String Interpolation led to Remote Code Execution

    Ruby on Rails String Interpolation led to Remote Code Execution

    13-Mar-2017 3589
    @nahamsec and I discovered a Cross-Site Scripting vulnerability a few months ago related to Rails typecasting request variables into JSON. This caused the output to be JSON formatted and the JSON indexes would avoid XSS encoding. We decided to run with this concept and explore the rest of the website to see if we could identify other vulnerabilities using the same method.
    Read more /
    Use coupon code:

    RUBYONRAILS

    to get 30% discount on our bundle!
    Prepare for your next tech interview with our comprehensive collection of programming interview guides. Covering JavaScript, Ruby on Rails, React, and Python, these highly-rated books offer thousands of essential questions and answers to boost your interview success. Buy our 'Ultimate Job Interview Preparation eBook Bundle' featuring 2200+ questions across multiple languages. Ultimate Job Interview Preparation eBook Bundle

    Bestseller

    Ruby Interview Questions

    Tags

    #Ruby #on #Rails #String #Interpolation #led #to #Remote #Code #Execution #code

    Related Links

    Zero-Downtime migrations in Rails
    Bundler 1.13: The one with steady improvements
    How to Test Background Jobs with Active Job (Example) | GoRails
    Your first A/B test with Rails - Paweł Dąbrowski
    Better Nested Attributes in Rails with the Cocoon Gem

    Useful Links

    Quick Links

    Get in Touch

    Ruby On Rails Bosnia

    [email protected]

    [14627, 15290, 11890, 21533, 24571, 12865, 7557]

    Ruby On Rails Bosnia © 2016

    Template By HTML Codex