Analysis of Rails XML Parameter Parsing Vulnerability

  • pretty good writeup - miss the days when contrived examples were considered a cop-out though ;)