During the seven years I’ve been using Rails, the framework has exploded in popularity because it’s made creating powerful applications quick and easy. It seamlessly handles so many of the issues that used to absorb developers’ time, such as database integration, session…
Continue Reading…Last week we looked at ways malicious people can try and hijack the sessions of valid users. This week, we’re going to look at two dangers you are faced with when a malicious user signs up to your site. We’ll again look…
Continue Reading…This is the final part of our exploration into the Rails security. Last week we looked at mass-assignment and SQL injection issues, having previously explored the risks of session hijacking. This week we’ll look at risks to caching, protecting against XSS, and…
Continue Reading…