Ruby on Rails 2.3.6 released, rapidly updated to 2.3.7

[J65nko]

From http://www.h-online.com/open/news/it...7-1006057.html

After six months of bug fixing, some new features and bridge work to Rails 3, the Rails developers released Ruby on Rails 2.3.6 on Sunday, but have now released 2.3.7 after some bugs were discovered in code back ported from Rails 3.

The bugs were discovered when Nathan Weizenbaum began updating HAML for the new release and found issues with XSS (Cross Site Scripting) prevention. The XSS prevention, based on rails_xss, was one of the updates in 2.3.6 and is used for automatic HTML escaping.

[J65nko]

From http://www.h-online.com/open/news/it...m-1006304.html

Ruby on Rails 2.3.8 has been released by the Rails developers to fix yesterday's release of Ruby on Rails 2.3.7. The 2.3.7 release had contained some rapidly created fixes related to the rails_xss plugin to correct Sunday's Rails 2.3.6 release, but unfortunately the Rails 2.3.7 fixes had unintended consequences for all Rails users. Ruby on Rails 2.3.8 is now available for download.

[Carpetsmoker]

Is this sort of stuff typical for rails or is this just a one-time blunder?

[TerryP]

Rails tends to move fast, guess someone missed writing a few tests... lol

[Carpetsmoker]

Is that another way of saying "Rail releases are buggy"?