3 ms·
Ruby On Rails Security Guide
- davcro 16y agoOne of my rails apps was hijacked via xss injection last week. I wish I had read this guide sooner. I highly recommend for any rails admin.
- jim_h 16y agoThanks. I've read this before, but it's always good to reread it.
- greenlblue 16y agoThe regular expression surprised me. I'm really used to using ^$ in php and it works as intended but apparently in Ruby the correct delimiters are \A\z.
- bodhi 16y ago^ and $ also work.
- Groxx 16y agoA very nice list. Readable, explanatory, and full of good suggestions. Almost all focused on session / injection / xss attacks, but that's probably the biggest threat you've got. I wish I'd seen it sooner; most I've seen before, but the regex one in particular was new to me, and it really only takes one, doesn't it? Anyone know of anything notable they missed? I'd love to know, and it could be useful to get it added to the list too.