# Do I need additional protection against buffer overruns?

**URL:** <https://www.ruby-forum.com/t/do-i-need-additional-protection-against-buffer-overruns/88548>\
**Category:** Rails\
**Created:** [March 12, 2007, 3:49pm UTC](https://www.ruby-forum.com/t/do-i-need-additional-protection-against-buffer-overruns/88548 "2007-03-12T15:49:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![wpwood](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/w/d6d6ee/32.png) [@wpwood](https://www.ruby-forum.com/u/wpwood)\
**Post date:** [March 12, 2007, 3:49pm UTC](https://www.ruby-forum.com/t/do-i-need-additional-protection-against-buffer-overruns/88548/1 "2007-03-12T15:49:49Z")

</div>

Greetings!

I’ve got both client-side and server-side validations in place, but  
wonder if I need to do more.

Specifically, …

In addition to user input via browser, my Rails app can import the same  
data from XML files (using REXML). Is there a possibility of buffer  
overruns as I’m reading the data from the XML files into instance  
variables in the controller method, prior to submitting them to the  
model for validation? I can’t seem to find a definitive statement on  
buffer overrun protections in Rails. Do I need to worry about REXML  
too? Or is the potential issue limited to Rails?

Thanks much for any info.

Best regards,  
Bill