New blog posts about Rails 5 ActionCable and the HTTPoxy vulnerability

[Tinco Andringa (Phusion)]

In the past few weeks we have written two blog articles, check them out:

About stress testing Rails 5.0 ActionCable, finding and fixing the issues we found, this one is the first of a 2-part series so if you like it look out for the next one:

https://blog.phusion.nl/2016/07/07/actioncable-under-stress-p1/

About the HTTPoxy vulnerability, how Passenger applications are not vulnerable and other interesting details:

https://blog.phusion.nl/2016/07/21/web-applications-on-phusion-passenger-are-not-vulnerable-to-httpoxy/

Kind regards,

Tinco