Check out the Release Notes here: http://weblog.rubyonrails.com/2008/10/23/rails-2-1-2-security-other-fixes