Skip to content

Commit

Permalink
Wording.
Browse files Browse the repository at this point in the history
  • Loading branch information
@postmodern
postmodern committed Aug 25, 2011
1 parent 920adf2 commit b7f178d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.rdoc
View file
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ for wrap the gemspec data, so that they can be safely embedded into
Ruby code.

Unfortunately, the +ruby_code+ method naively wraps Strings in
<tt>%q{</tt> and <tt>}</tt>, and performs no character-escaping.
<tt>%q{</tt> <tt>}</tt>, and performs no character-escaping.
Security connoisseurs will immediately recognize this mistake
as the same one which makes SQL Injection possible.

Expand Down

0 comments on commit b7f178d

Please sign in to comment.