Rails 3.0.9.rc1 has been released!

Hey folks. Sorry for the multiple releases in such a short time span,
but the security fixes released yesterday seem to have broken people’s
applications. I am not happy about that.

I’ve pushed a 3.0.9.rc1. Please test it against your application
against this release candidate and report any regressions to the rails
core mailing list
. I
would like to hear your feedback, good or bad.

I will release the final in 72hours if there are no reported
regressions. If there are reported regressions, I will release another
RC and the clock will start over.

How to test

Update your Gemfile to point at Rails version 3.0.9.rc1, then do a
bundle update and test out your application.


Here are some of the major changes:

  • MemCacheStore works with Ruby 1.9 and -Ku
  • mailto SafeBuffer fixes
  • escape_javascript SafeBuffer fixes

For an exaustive list, please check out the commits on

Thanks for your patience everyone!

<3 <3 <3

escape_javascript still doesn’t work like it has in previous versions.
You can see how it’s expected to work & what it outputs
here: http://twitpic.com/58vm5j
The code is here: http://bit.ly/leww2A

An upgrade to Haml 3.1.2 was also necessary for the new SafeBuffer


This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs