Tag Info

New answers tagged


Encrypt the database with a key and only store the key in memory Add common security headers. You can look at what other sites use (for example kraken.com) and use the same HTTP headers after reading up on them (short list: HSTS, nosniff, XSS protection, XFO, CSP) Test for XSS Make sure the RoR XSRF protection works Try to find a pentest company to do a ...

Top 50 recent answers are included