07 Jul '12, 12pm

#358 Brakeman via @zite

Brakeman has given this error has a weak confidence so it may not be a problem but it’s a good idea to investigate it anyway so that we’re sure. The documentation on Redirect warnings has more details about this time of vulnerability. If we redirect based on the value from a user-supplied parameter then we can be subject to phishing attacks. An evil site could be set up that looks identical to ours and the owners of this site could use this vulnerability to redirect from our site to theirs. If someone signs in through our application and is redirected to the evil site they could be prompted to enter their password again. To protect our site from this vulnerability we can use the :only_path option in our redirect which will require that the redirect takes place only within our application. In our application’s SessionsController we redirect based on the value of a session v...

Full article: http://railscasts.com/episodes/358-brakeman?view=asciicast

Tweets

When Brands go bad, fit goes you know where

fashion-incubator.com 07 Jul '12, 7pm

When Brands go bad, fit goes you know where Posted by Kathleen Fasanella on Jul 7, 2012 at 12:09 pm / Fit and Sizing / Tra...

4 Things You Need to Know About Getting Links With Infographics

4 Things You Need to Know About Getting Links W...

link-assistant.com 06 Jul '12, 2pm

While infographics are a popular means of link building, there are oftentimes may infographics that receive far fewer link...

ASCIIcast 358 - Brakeman

railscasts.com 26 Jun '12, 6pm

Brakeman has given this error has a weak confidence so it may not be a problem but it’s a good idea to investigate it anyw...

Planeclear and In the Know Experience Announce Olympic package for $100,000 #DollarAndDream

Planeclear and In the Know Experience Announce ...

elitechoice.org 07 Jul '12, 11am

The Olympic season is here Planeclear and In the Know Experience have announced interesting but very expensive package for...

The Many Bags of Jennifer Lopez: Jennifer Lopez...

purseblog.com 05 Jul '12, 9pm

has transformed her look quite a bit over her career, starting with her introduction to international fame in Selena to he...

#Supplychain Basics: Know Yourself & the Enemy ...

ebnonline.com 05 Jul '12, 3pm

If I were to ask the most critical question with regard to what assures a company's success in its business sector, I woul...

Webinar Alert! Breakthrough Many-Core Processin...

element14.com 06 Jul '12, 5pm

Newark/element14 and Impulse Accelerated Technologies Present: “Breakthrough Many-Core Processing Using the Altera Cyclone...

Excusas :-( British Airways ‘Know Me’ Program U...

searchenginejournal.com 07 Jul '12, 7am

In an effort to provide an unprecedented level of customer service for VIP passengers, British Airways has announced a new...

From Field to Cup: Why It’s Important to Know the Story of Fair Trade Tea

From Field to Cup: Why It’s Important to Know t...

triplepundit.com 01 Jul '12, 9am

This is the second article in a series on “The Future of Fair Trade ,” written in collaboration with Fair Trade USA . A 50...

British Airways ‘Know Me’ Program Uses Technolo...

searchenginejournal.com 06 Jul '12, 7pm

In an effort to provide an unprecedented level of customer service for VIP passengers, British Airways has announced a new...

You Know You’re An Enterprise SEO If…

searchengineland.com 02 Jul '12, 3pm

http://twitter.com/Neuromancer Maurice Walshe “Testify” Brother “Testify” – I think you missed out thinking you know Leroy...

How many robots?

arduino.cc 24 Jun '12, 1pm

How many robots run on Arduino? I really don’t know. The guys from Complubot keep on sending pictures from the robots they...

Charging Your Electric Car At Home? You’re 20 Feet From Power (Probably)

Charging Your Electric Car At Home? You’re 20 F...

greencarreports.com 05 Jul '12, 12pm

As the survey discovered, the newer the home, the more likely power outlets would be found within 20 feet of a parking spa...

Online Video Marketing Essentials One-Day Workshop Next Week | London UK: I probably receive an invite from the

Online Video Marketing Essentials One-Day Works...

reelseo.com 06 Jul '12, 5am

I probably receive an invite from the UK and across Europe every week to discuss how I can work together with Digital Mark...

New NOW YOU KNOW ep! @Don_Richmond's personal r...

clicknetwork.tv 06 Jul '12, 5am

News for the week: Don's personal celebration of Pink Dot 2012, Katie Holmes and Tom Cruise announce divorce and we show y...