Comments on: Got a Rails App Accepting XML Input? You've Got A Fix To Do - Now.

By: Thomas Eng

Thomas Eng — Wed, 29 Oct 2008 08:44:46 +0000

libxml-ruby is superior. There should be an option to use it, if it is available on your platform of choice.

Glenn — Tue, 26 Aug 2008 08:21:56 +0000

Personally I'd rather know about them sooner than later, keep up the Saturday posts if that is when they come in.

postmodern — Mon, 25 Aug 2008 20:13:32 +0000

Perhaps it's time to start moving to libxml-ruby?

Christoph Olszowka — Sun, 24 Aug 2008 13:23:36 +0000

The fix works for 2.0+ by simply placing the fix file ( http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb ) in config/initializers, no need for gems or require calls at all (see Steve Madsen's comment in the offical RoR blog).

On a Linux shell, you could simply type "wget http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb -O ./config/initializers/rexml-expansion-fix.rb" in Rails Root

Jonathan George — Sun, 24 Aug 2008 00:14:43 +0000

Can we please stop releasing these on Saturday mornings?