Software
a Rails image upload bug lets a file lie about what it is — and steal your app's secret keys
KindaRails2Shell abuses a file that tells two different libraries two different lies to read anything your Rails app can read — including the keys that sign its cookies.
Priya Nair · 3h ago · 6 min