Analysis of Rails XML Parameter Parsing Vulnerability

pretty good writeup - miss the days when contrived examples were considered a cop-out though ;)