Ruby On Rails

Blogs

Let’s Write a Gem: Part 1 - Rake Routes

Let’s Write a Gem: Part 1 - Rake Routes Gems. Gotta love em. If you’re a Ruby developer then you already know that gems are simply fundamental to Ruby programming. Let’s write one. Right now. And not a simplistic Gem that just adds three lines of code to the automatically generated Gem ...

Fixing XXE Vulnerabilities in Nokogiri

Fixing XXE Vulnerabilities in Nokogiri We recently added a pair of high-severity XML External Entities (XXE) vulnerabilities found in the Nokogiri library to our vulnerability database. This post explains how the vulnerability works and discusses how to fix the exploit in your applicat...

Ruby on Rails on Azure App Service (Web Sites) with Linux (and Ubuntu on Windows 10)

Ruby on Rails on Azure App Service (Web Sites) with Linux (and Ubuntu on Windows 10) Running Ruby on Rails on Windows has historically sucked. Most of the Ruby/Rails folks are Mac and Linux users and haven't focused on getting Rails to be usable for daily development on Windows. There have been some heroic efforts by a number of v...

Checklist of security precautions for Ruby on Rails applications.

Checklist of security precautions for Ruby on Rails applications. This document provides a list of security measures to be implemented when developing a Ruby on Rails application. It is designed to serve as a quick reference and minimize vulnerabilities caused by developer forgetfulness.This checklist is meant t...

The state of Ruby on Google Cloud Platform

The state of Ruby on Google Cloud Platform At Google Cloud Next '17 last month we announced that App Engine flexible environment is now generally available. This brings the convenience of App Engine to Rubyists running Rails, Sinatra or other Rack based web frameworks.

Jumping Off The Ruby Memory Cliff

Jumping Off The Ruby Memory Cliff Memory spikes way up. The dark purple at the bottom indicates that we are now swapping significantly. The dotted line is our memory limit, which you can see we go well over. This sharp spike would indicate a problem, however, it’s curious how the ...

Protect Your Rails Apps from Bots, Scrappers and DDoS attacks

Protect Your Rails Apps from Bots, Scrappers and DDoS attacks The main objective of this kind of distributed denial of service (DDoS) attack, commonly called an HTTP flood, is to overburden system resources and make them unavailable to your real users. You can use AWS WAF to provision a solution that automat...

Fae CMS | A Flexible, Open-Source, Ruby On Rails CMS Engine

Fae CMS | A Flexible, Open-Source, Ruby On Rails CMS Engine Like many Rails CMS engines, Fae delivers all the basics to get you up and running: authentication/authorization, a responsive UI, form helpers and workflows. But unlike other engines, Fae generates models, controllers, and views into your app tha...

One Line of Code that Compromises Your Server

One Line of Code that Compromises Your Server A session secret is a key used for encrypting cookies. Application developers often set it to a weak key during development, and don't fix it during production. This article explains how such a weak key can be cracked, and how that cracked key can...

Rails Benchmarking: Puma and MultiProcess

Rails Benchmarking: Puma and MultiProcess A quick note on Puma: by default it will spawn threads on demand in a single Ruby process with a single GIL, up to a maximum of 16 or whatever you specify. In cluster mode it will spawn more Ruby processes, as many as you specify, each one having ...

Get in Touch

Ruby On Rails Bosnia

[email protected]

[9126, 6932, 12146, 6196, 21428, 5756, 7474]