Ruby On Rails

Blogs

New Rails security HTTP headers - Ruby on Rails Security Project

New Rails security HTTP headers - Ruby on Rails Security Project New Rails security HTTP headers and a growing number of other Ruby on Rails security topics. Some are sent by default in Rails now. Rails sends a couple of new security HTTP headers by default so you should probably know what they do. There are al...

Excel Injection via Rails downloads - Ruby on Rails Security Project

Excel Injection via Rails downloads - Ruby on Rails Security Project Excel Injection via Rails downloads and a growing number of other Ruby on Rails security topics. A = in a name could make Excel run. Excel injection occurs when a CSV or Excel file is crafted to contain control characters in a cell which run a com...

A week with a Rails Security Strategy

A week with a Rails Security Strategy A set of mini habits every workday to achieve a little progress in all the different aspects of security.The answer may be in the power of habits, especially mini habits. These are good for busy people or those who want to make a (big) improvement...

Ruby method and class injection - Ruby on Rails Security Project

Ruby method and class injection - Ruby on Rails Security Project Ruby method and class injection and a growing number of other Ruby on Rails security topics. A class name in user input.A user could provide an arbitrary model name in params[:type] and thus find an object in a different model than expected. Now, ...

XSS protection in Haml templates - Ruby on Rails Security Project

XSS protection in Haml templates - Ruby on Rails Security Project XSS protection in Haml templates and a growing number of other Ruby on Rails security topics. Haml templates support Rails’ XSS.

OWASP XSS Prevention Cheat Sheet - Ruby on Rails Security Project

OWASP XSS Prevention Cheat Sheet - Ruby on Rails Security Project OWASP XSS Prevention Cheat Sheet and a growing number of other Ruby on Rails security topics. A Cross Site Scripting cheat sheet by the Open web application security.Deny all untrusted data and don’t put it directly into the HTML or into any other...

A Content Security Policy (CSP) strategy - Ruby on Rails Security Project

A Content Security Policy (CSP) strategy - Ruby on Rails Security Project A Content Security Policy (CSP) strategy and a growing number of other Ruby on Rails security topics. CSP is a great way to reduce or completely remove the number 1 web app security vulnerability – Cross-Site Scripting.

HTML-safe, ActiveSupport::SafeBuffer explained - Ruby on Rails Security Project

HTML-safe, ActiveSupport::SafeBuffer explained - Ruby on Rails Security Project Updated guide: HTML-safe, ActiveSupport::SafeBuffer explained and a growing number of other Ruby on Rails security topics. How does Rails' XSS protection work.

CSS Injection in Rails - Ruby on Rails Security Project

CSS Injection in Rails - Ruby on Rails Security Project Updated guide: CSS Injection in Rails and a growing number of other Ruby on Rails security topics. Can CSS from the user do any harm?.

What is Cross Site Scripting (XSS)? - Ruby on Rails Security Project

What is Cross Site Scripting (XSS)? - Ruby on Rails Security Project Updated guide: What is Cross Site Scripting (XSS)? and a growing number of other Ruby on Rails security topics. The number 3 in the OWASP Top Ten web application.

Get in Touch

Ruby On Rails Bosnia

[email protected]

[8810, 13998, 31820, 53593, 32250, 32314, 19303]