4 ms·

I posted a link to the relevant part of it (http://news.ycombinator.com/item?id=3665429 http://news.ycombinator.com/item?id=3665429) on another thread regarding

by gphil 15y ago

I posted a link to the relevant part of it (http://news.ycombinator.com/item?id=3665429 http://news.ycombinator.com/item?id=3665429) on another thread regarding this exploit already, but the official Rails Security Guide covers this and other common security pitfalls really well. It is worth reading over thoughtfully if you are building a Rails app: http://guides.rubyonrails.org/security.html http://guides.rubyonrails.org/security.html

davidblondeau 15y ago
Right, the Rails security guide and the Netscape secure coding guide (https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines) are highly recommended reading for every developer at my company. They are very well written and cover a lot of ground when developing web applications on RoR.