4 ms·

I really enjoy Sinatra and am indeed using it for REST style API hosting, but the counter argument might be all the security stuff that is built into the Rails

I really enjoy Sinatra and am indeed using it for REST style API hosting, but the counter argument might be all the security stuff that is built into the Rails routes/controllers. this might be a great case for a stripped down rails app as opposed to a Sinatra app.

jeltz 14y ago
I thought most of the security in Rails is provided by the rack-security middleware? Or am I forgetting something which Rails provides here?
- dcu 14y ago
  Escaping everything by default to avoid XSS attacks. that's a nice feature to have.
  - auxbuss 14y ago
    This can be done in Sinatra: http://www.sinatrarb.com/faq.html#auto_escape_html http://www.sinatrarb.com/faq.html#auto_escape_html