7 ms·
I migth not like Django, but its security is 100x better than Rails. Django fixes stuff right away, and doesn't have any stupid Yaml.load() bullshit.
by targusman 13y ago
I migth not like Django, but its security is 100x better than Rails. Django fixes stuff right away, and doesn't have any stupid Yaml.load() bullshit.
- fallenhitokiri 13y agoI'm not sure if Djangos YAML-serializer was effected by this bug but TastiePie did (IIRC) use `load` instead of `safe_load` and suffered the exact same issue e.x. You could argue that, no matter how prominent a library is, it does not reflect the actual framework. While this is true people could start arguing that Rails doesn't really have an admin interface and this would change the comparison I did.