Blogs
A Deep Dive into CSRF Protection in Rails – Ruby Inside
If you’re using Rails today, chances are you’re using CSRF protection. It’s been there almost since the beginning, and it’s one of those features in Rails that makes your life easier without needing to give it a second thought.Briefly, Cross-Site ...
Fixing Bundler's dependency resolution algorithm and making it 2x faster
A month ago we had a report of some strange behaviour from Dependabot: on some projects, we were creating a “Dependabot can’t resolve your Ruby dependency files” issue, only to immediately close it. Hunting down that bug took me right to the core ...
Faster Rails: Eliminating N 1 queries - Semaphore
Rails does not scale well – this argument is often used to downplay the worth of the language and the framework. Yet, many businesses from small startups to platforms with millions of users use it as the backbone of their operations. A good questi...
Preventing security issues in Ruby on Rails (based on OWASP cheatsheet)
Although core team and the community behind Ruby on Rails is working very hard to ensure that this framework is providing high level of security, it is not possible that any framework will cover every possible scenario and there is always an appli...
Beyond Rails Abstractions: A Dive into Database Internals
The downside of this level of insulation from core functionality is that developers don’t learn all of the things they perhaps should. Only last week I was able to troubleshoot a slow query by removing the index because someone along the line didn...
Visit our blog
