From: Gregory Brown <gregory.t.brown@...>
Date: 2008-08-24T09:22:02+09:00
Subject: Re: [ANN] DoS vulnerability in REXML

On Sat, Aug 23, 2008 at 8:03 PM, Christopher Dicely <cmdicely@gmail.com> wrote:

> I don't think the monkeypatch has anything to do with Rails vs. Ruby,
> since there are general instructions for the monkeypatch followed by
> instructions on how to include it in a Rails app.

It has everything to do with Ruby vs. Rails.

If we are talking about a vulnerability in standard Ruby, we should be
able to patch standard Ruby and be done with it, not be required to
use some hackish monkeypatch in every application we write.  Ruby core
does of course, maintain Ruby's standard library (or so we hope.)

-greg

-- 
Technical Blaag at: http://blog.majesticseacreature.com | Non-tech
stuff at: http://metametta.blogspot.com