From: Clifford Heath <no@...>
Date: 2008-05-08T21:20:05+09:00
Subject: Re: In order to cross platform, Ruby is designed to be interpreted in  runtime, so Ruby code is exposed on the server. This brings a security danger  which is not acceptable.

Clifford Heath wrote:
> Phillip Gawlowski wrote:
>> If I'm able to read source code in a, hopefully, protected directory,
>> I'm not going to bother with code injection.
> Completely disagree there. As soon as I see that mongrel's running,
> I have a plan of attack.

Sorry, I mis-read. I agree with this one. I thought you said you
wouldn't bother with injection *unless* you could read the code :-).