From: Urabe Shyouhei <shyouhei@...>
Date: 2008-08-24T08:37:20+09:00
Subject: Re: [ANN] DoS vulnerability in REXML

James Britt wrote:
> Then the original post is misleading in emphasizing Rails.
>
> Lots of people use REXML on the Web outside of Rails, so the effect on
> Rails is incidental to the real problem and should have been omitted
> for clarity.

Incidental yes, but that doesn't mean Rails users must be ignored. 
Perhaps web-admins should not omit Rails workarounds, but also add a
note that non-Rails apps can suffer this issue.