# \[ANN\] Rails 2.0: Release Candidate 2 **URL:** \ **Category:** Rails\ **Created:** [November 29, 2007, 6:14am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597 "2007-11-29T06:14:39Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 6:14am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/1 "2007-11-29T06:14:39Z")
Grab it while it’s hot: > **[Rails 2.0: Release Candidate 2](https://rubyonrails.org/2007/11/29/rails-2-0-release-candidate-2)** > > After another batch of fixes, tweaks, and buckets of polish, we’ve prepared the hopefully last step before 2.0 can go final: Release Candidate 2. If nothing major pops up, expect the final version to land within the next week or two at the most.As... ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 11:11am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/2 "2007-11-29T11:11:12Z")
I’m using a Java applet (dndplus) to upload images. In order to do this, it is necessary to pass the session id along with the parameters to maintain session data. This has worked just fine up to now; however, in Rails 2.0 RC2, any upload attempt results in a SessionFixationAttempt exception, since RC2 now only allows the “session\_id” parameter to be passed from cookies. Is there a way to turn off this new behaviour, short of monkey- patching the session method itself? Automatic session fixation protection is great, but sometimes it is quite legitimate to pass in a session id in this way. / Peter ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 6:37pm UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/3 "2007-11-29T18:37:20Z")
Running… rake rails:freeze:edge TAG=rel\_2-0-0\_RC2 terminates part way through with… svn: URL ‘[http://dev.rubyonrails.org/svn/rails/tags/rel\_2-0-0\_RC2/actionwebservice](http://dev.rubyonrails.org/svn/rails/tags/rel_2-0-0_RC2/actionwebservice)’ doesn’t exist and doesn’t pull down activeresource. Just running it a second time succeeds. Deleting the vendor/rails directory and trying again reproduces the problem. – [http://www.5valleys.com/](http://www.5valleys.com/) [http://www.workingwithrails.com/person/8078](http://www.workingwithrails.com/person/8078) ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 7:58pm UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/4 "2007-11-29T19:58:55Z")
I think an excellent place to post it is _with the announcement_. If you’re announcing a new version (of anything, not just Rails), and you know people are probably going to have a problem upgrading, but the current workaround to the problem is an absurdly easy two keystrokes (up arrow, enter key), then just mention it with the announcement. Don’t make everyone waste valuable time hunting for the simple solution to a problem you knew they were going to have. William P. wrote: > > terminates part way through with… – [http://www.5valleys.com/](http://www.5valleys.com/) [http://www.workingwithrails.com/person/8078](http://www.workingwithrails.com/person/8078) ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 7:16pm UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/5 "2007-11-29T19:16:06Z")
You should search this list as this is posted frequently. -Bill Jon G. wrote: > and doesn’t pull down activeresource. Just running it a second time > succeeds. Deleting the vendor/rails directory and trying again > reproduces the problem. – Sincerely, William P. ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 29, 2007, 10:27pm UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/6 "2007-11-29T22:27:21Z")
Sounds reasonable to me. Maybe suggest it to them on the rails-core list? Jon G. wrote: > > > svn: URL > > – > [http://www.5valleys.com/](http://www.5valleys.com/) > [http://www.workingwithrails.com/person/8078](http://www.workingwithrails.com/person/8078) > > > – Sincerely, William P. ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 30, 2007, 9:43am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/7 "2007-11-30T09:43:24Z")
Nobody who has any input on this? As we have a RC for 2.0, this seems to be the right place to ask this question. As it is now, I have hade to monkey-patch away the session fixation check in ActionController::CgiRequest::session. There no longer seems to be any way to legitimately pass in a session id, since Edge and RC2 disallow it except from cookies. / Peter B. 29 nov 2007 kl. 11.10 skrev Peter B.: ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 30, 2007, 9:53am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/8 "2007-11-30T09:53:20Z")
On 30 Nov 2007, at 08:43, Peter B. wrote: > Nobody who has any input on this? As we have a RC for 2.0, this seems > to be the right place to ask this question. As it is now, I have hade > to monkey-patch away the session fixation check in > ActionController::CgiRequest::session. There no longer seems to be any > way to legitimately pass in a session id, since Edge and RC2 disallow > it except from cookies. You need ActionController::Base.session\_options[:cookie\_only] = false Fred ---
**Author:** ![DHH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/258eb7/32.png) [@DHH](https://www.ruby-forum.com/u/DHH)\ **Post date:** [November 30, 2007, 10:00am UTC](https://www.ruby-forum.com/t/ann-rails-2-0-release-candidate-2/121597/9 "2007-11-30T10:00:21Z")
Many thanks! / Peter 30 nov 2007 kl. 09.52 skrev Frederick C.: