Since finishing The Passionate Programmer I’ve been putting a lot of thought into how to package the advice from the book into something more structured, serial, and prescriptive.

The Amazon reviews for the book are almost all glowingly positive with the occasional piece of constructive criticism. Here’s one such excerpt from an otherwise positive review by Ira Laefksy which I agreed with and took to heart:

A cross site scripting vulnerability in Rails was publicly reported yesterday that affects everyone running Rails 2.x on versions of Ruby before 1.9. The vulnerability occurs in the escaping code for form helpers in Ruby on Rails. Attackers who can inject deliberately malformed Unicode strings into the form helpers can defeat the escaping checks and inject arbitrary HTML.

I’m probably a bit late to the party with this article, but I’m a bit of a chicken so I thought I’d wait for the dust to settle a bit before installing Snow Leopard on the MacBook Pro I use for Ruby development.

For the past month I have been working with

• Add new comment
• Read more
• 118 reads
• Feed: adsdevshop
• Original article
• ShareThis