castwide

I'd expand on his premise by saying that XML beats JSON for structured documents, which also happens to be a practical way to represent a UI layout.

You might be thinking of an old SQL injection vulnerability that allowed updating models from unchecked request parameters, aka the mass assignment problem[0]. That type of thing can be a concern in any web application, regardless of the framework. Modern Rails does a decent job of discouraging it out of the box.

[0] https://arstechnica.com/information-technology/2012/03/hacke...

A workspace shared between two people, or even three or four, is a little different from an open office. I've worked in rooms I shared with small groups and can definitely see the benefits. After a certain point, like maybe ten or twelve, I think it becomes too distracting.

I agree. If "access" is a verb, the "to" is superfluous and awkward.

CGI is still in the stdlib, and AFAIK there's no plan to deprecate it. You might be thinking of a few other methods like URI.escape that have been marked obsolete in favor of CGI equivalents.

Coincidentally, I announced the beta version of a Ruby type checker in Solargraph two days ago: https://github.com/castwide/solargraph/issues/192

It has a few overlapping features with Sorbet, with one major difference being that Solargraph type checking relies on YARD documentation instead of annotations.