Simon Willison’s Weblog

Taking the unsafe GETs out of Rails. A great explanation of the problem, and a decent stab at a solution.