Ruby on Rails Tutorials — Security

Getting Started with Restful Authentication in Rails

Are you accepting sensitive user data? Passwords, credit card numbers, etc. By default, Rails stores all submitted parameters in plain text in the logs. This episode will show you how to filter this sensitive input so it doesn't show up in the log file.

The unfortunate part about learning a new language or technology is that there's typically little focus on security matters. Rails gives you a lot of time-saving helpers and methods, but you still need to understand where your app might be vulnerable. This is a quick overview of protecting your code against SQL injection attacks and cross-site scripting exploits.

How to guard against cross site scripting in Ruby on Rails.