8 months ago
xss_terminate vs Serialized Data

When using serialized data fields in an ActiveRecord model, xss_terminate will cause problems when saving as it will try to use String methods when it’s actually dealing with a hash or an array. This can be avoided by telling the plugin to ignore these fields:

blog comments powered by Disqus