-
Cross-Site Scripting (XSS) in Rails - Ruby on Rails Security Project
All in one place: Updated guides about a growing number of Ruby on Rails security topics and all your questions answered.XSS allows an attacker to exec. -
Rack::Attack: Rate limits against DDoS and abusive users - Ruby on Rails Security Project
Rack::Attack: Rate limits against DDoS and abusive users and a growing number of other Ruby on Rails security topics. Unless you know what your users a. -
New Rails security HTTP headers - Ruby on Rails Security Project
New Rails security HTTP headers and a growing number of other Ruby on Rails security topics. Some are sent by default in Rails now. Rails sends a coupl. -
A week with a Rails Security Strategy
A set of mini habits every workday to achieve a little progress in all the different aspects of security.The answer may be in the power of habits, espe. -
Excel Injection via Rails downloads - Ruby on Rails Security Project
Excel Injection via Rails downloads and a growing number of other Ruby on Rails security topics. A = in a name could make Excel run. Excel injection oc. -
Ruby method and class injection - Ruby on Rails Security Project
Ruby method and class injection and a growing number of other Ruby on Rails security topics. A class name in user input.A user could provide an arbitra. -
OWASP XSS Prevention Cheat Sheet - Ruby on Rails Security Project
OWASP XSS Prevention Cheat Sheet and a growing number of other Ruby on Rails security topics. A Cross Site Scripting cheat sheet by the Open web applic. -
XSS protection in Haml templates - Ruby on Rails Security Project
XSS protection in Haml templates and a growing number of other Ruby on Rails security topics. Haml templates support Rails’ XSS... -
A Content Security Policy (CSP) strategy - Ruby on Rails Security Project
A Content Security Policy (CSP) strategy and a growing number of other Ruby on Rails security topics. CSP is a great way to reduce or completely remove. -
HTML-safe, ActiveSupport::SafeBuffer explained - Ruby on Rails Security Project
Updated guide: HTML-safe, ActiveSupport::SafeBuffer explained and a growing number of other Ruby on Rails security topics. How does Rails' XSS protecti.
