As everyone knows by now, Rails has a serious routing vulnerability. Anytime you use a :controller in your route, you are choosing a ruby file to load. The vulnerability allows an arbitrary ruby file to be loaded. The solution is an upgrade to Rails 1.1.5. There have also been reports that the 1.1.5 was an inadequate solution. I'm reccommending replacing the default route:
map.connect ":controller/:action/:index"
with
Dir["app/controllers/*_controller.rb"].map{|c| c[%r[/([^/]*)_controller], 1]}.each do |c|
map.send c.to_sym, "#{c}/:action/:id", :controller => c
end
This may get more complicated if you're using engines, or controllers in modules. If so, you can manually specify each controller like so:
%w(controller1 module/controller2 etc).each do |c|
map.send c.to_sym, "#{c}/:action/:id", :controller => c
end
