The rails tag has no wiki summary.
1
vote
2answers
340 views
How to test my website for the rails YAML vulnerability
I am quite puzzled by how to test my rails app for the YAML vulnerability
first, I upgraded to the latest rails 3.2.11, and I tried this
It gave me not likely to be vulnerable or URIPATH must be set
...
0
votes
1answer
94 views
How do I prevent my Rails application from attack? [closed]
My website is being nuked by new signups and new posts some of which don't even have user.id associated with.
How do I solve this? What code should I add to the user#new page and/or post#new page.
...
1
vote
2answers
124 views
Do these mysql and ssh issues mean my rails server was hacked?
I'm running a rails application on an ubuntu server on slicehost. I got a pingdom alert that the server was unreachable, so I tried to load the website in my browser. It showed a Passenger error, ...
4
votes
1answer
176 views
Can anybody recommend any gems for checking security vulnerabilities?
I want to check one of my RoR projects for security vulnerabilities.
So can anybody recommend any gems for my needs?
2
votes
2answers
409 views
Is my current method of handling session cookies insecure?
I'm writing a multi-tenant application where accounts are scoped by subdomains. This adds considerable complexity and I'm starting to worry about security.
Each user can have several accounts. For ...
3
votes
1answer
143 views
Security of rails user access/permissions plugins
I was wondering if anyone knows what the most secure user access plugin for Rails is, and if any of them prevent session fixation?
13
votes
3answers
677 views
Rails - protection against code injection and XSS
I've started using Ruby on Rails, and I was wondering if there were any security gotchas to watch out for with Rails, particularly regarding code injection and XSS?
I know Rails tries to prevent ...
