top | item 6207023

(no title)

targusman | 12 years ago

I migth not like Django, but its security is 100x better than Rails. Django fixes stuff right away, and doesn't have any stupid Yaml.load() bullshit.

discuss

order

fallenhitokiri|12 years ago

I'm not sure if Djangos YAML-serializer was effected by this bug but TastiePie did (IIRC) use `load` instead of `safe_load` and suffered the exact same issue e.x.

You could argue that, no matter how prominent a library is, it does not reflect the actual framework. While this is true people could start arguing that Rails doesn't really have an admin interface and this would change the comparison I did.