Blogs
Cross-Site Scripting (XSS) in Rails - Ruby on Rails Security Project
All in one place: Updated guides about a growing number of Ruby on Rails security topics and all your questions answered.XSS allows an attacker to execute scripts in the security context of your web application. The OWASP Top 10 of most frequent v...
Rack::Attack: Rate limits against DDoS and abusive users - Ruby on Rails Security Project
Rack::Attack: Rate limits against DDoS and abusive users and a growing number of other Ruby on Rails security topics. Unless you know what your users are doing in the application, it’s better to start with the track feature of Rack:Attack. Once yo...
New Rails security HTTP headers - Ruby on Rails Security Project
New Rails security HTTP headers and a growing number of other Ruby on Rails security topics. Some are sent by default in Rails now. Rails sends a couple of new security HTTP headers by default so you should probably know what they do. There are al...
Excel Injection via Rails downloads - Ruby on Rails Security Project
Excel Injection via Rails downloads and a growing number of other Ruby on Rails security topics. A = in a name could make Excel run. Excel injection occurs when a CSV or Excel file is crafted to contain control characters in a cell which run a com...
Ruby method and class injection - Ruby on Rails Security Project
Ruby method and class injection and a growing number of other Ruby on Rails security topics. A class name in user input.A user could provide an arbitrary model name in params[:type] and thus find an object in a different model than expected. Now, ...
OWASP XSS Prevention Cheat Sheet - Ruby on Rails Security Project
OWASP XSS Prevention Cheat Sheet and a growing number of other Ruby on Rails security topics. A Cross Site Scripting cheat sheet by the Open web application security.Deny all untrusted data and don’t put it directly into the HTML or into any other...
Visit our blog
