Maintenance Release: 1.6.1

June 15, 2008 at 21:28 · Filed under AMF, Rails, RubyAMF

Hello all,
There was at least one bug running RubyAMF with Rails 2.1, and I fixed
that today, and all my reference apps (which are what passes for
tests) work, so I’m tagging that sucka as 1.6.1.
You can get that like:
script/plugin install http://rubyamf.googlecode.com/svn/tags/1.6.1/rubyamf


Or from the current tag:
script/plugin install http://rubyamf.googlecode.com/svn/tags/current/rubyamf


Now, for anyone interested, what was breaking was Rails 2.1’s forgery
protection, which stops cross site scripting attacks by placing a
security code in HTML and Ajax forms and verifying that that’s the
right code on the Rails side.
My fix was just to add the AMF mime type to the list of mime types
that aren’t checked for forgery protection, alongside XML and JSON. I
think it belongs there, because there’s no way that I know of to hook
into the Rails forgery protection.
To do the same type of thing from a Flash app would be a bit of a
different process, and I’m not quite sure what the best way to think
about that is, nor if it’s actually a problem we need to worry about
anytime soon. Any thoughts?
Upshot: RubyAMF 1.6 for Rails 2, RubyAMF 1.6.1 for Rails 2.1.

Cross posted from (http://groups.google.com/group/rubyamf)

Tyler Chesley said,

August 26, 2008 @ 22:59

I’ve dealt with the forgery protection problem in Flex by passing the authenticity_token to the Flex app as a flash var and adding it as param in all POST requests. Its a pain in the ass for sure. I’m going to be trying out RubyAMF for the first time. Thanks for the great work.

andy said,

September 6, 2008 @ 06:34

i love rubyamf very much

and recent i find ruboss,but there don’t have enough document,

so i will cotinue to use rubyamf, and i will support forever.

Ashine said,

October 1, 2008 @ 06:29

Hi,
I am facing some problem while using RubyAMF (1.6.1) in rails 2.1.
After I install rubyamf using “http://rubyamf.googlecode.com/svn/tags/1.6.1/rubyamf” command, I tried to run the rails again.
But it was showing an error
”
undefined method `render_text’ for #
/home/pranav/workspace/engine/vendor/plugins/rubyamf/rubyamf_core/util/action_controller.rb:39:in `render’
.
.
.
script/server:3
/rubyamf/gateway/render_action
undefined method `render_file’ for #
”
And likewise.
What could be the possible reason for this.
After installing rubyAMF was there something I have missed ??

Jeff Sidlosky said,

November 3, 2008 @ 11:27

Keep up the fantastic work! We are currently using WebORB but after seeing the poor performance, we are going to start to try to switch to RubyAMF (today!).

Our site is http://jukefly.com — which is a browser based music player for your personal music library. Kinda like Winamp Remote but it sucks a lot less :-)

Long said,

February 16, 2009 @ 23:12

Hi there,

Thanks for the awesome work. I wonder why isn’t any recent releases? Are you guys still working on this?

I found some very important bug fixes from the google code. Are they safe to use?

Thanks,
–Long

RSS feed for comments on this post · TrackBack URI

Leave a Comment