If an attacker can obtain the value of secret_key_base in rails 6, what can he achieve with that? I know that he can forge arbitrary sessions, but was wondering whether there are other consequences.
Keep up to date with Rails on Twitter and This Week in Rails
Policies: Conduct, License, Maintenance, Security, Trademarks