Closed headius closed 9 years ago
See jruby/jruby-rack#189 for a PR merged to update to a newer rack, which fixes an XSS issue in ShowError. jruby-rack enables ShowError by default, so we should get an updated release out for this ASAP.
1.1.18 is out with a fix ... same comment applies here as on #189
See jruby/jruby-rack#189 for a PR merged to update to a newer rack, which fixes an XSS issue in ShowError. jruby-rack enables ShowError by default, so we should get an updated release out for this ASAP.