Ruby on Rails Cookiestore Vulnerability

"...this type of flaw is particularly dangerous on websites that don't use SSL."



via planetweb