Am I missing something?
SELECT * FROM user WHERE "string" = 0;
will indeed match all users, but
SELECT * FROM user WHERE token = 0;
will not. (Presuming the token is stored in a table column)
Rails will do the following:
User.find_by_reset_password_token(0)
User Load (0.8ms) SELECT `users`.* FROM `users` WHERE `users`.`reset_password_token` = 0 LIMIT 1
=> #<User id: 1,[...]
Overall fixing this it looks like routine house keeping and nothing major.
> It may also be triggered indirectly via Git’s export-subst mechanism, which applies the formatting modifiers to selected files when using git archive.
This very practical to exploit on Git forges like GitHub or GitLab which allow their users to download archives of tags or branches.