Insecurity is Ruby on Rails Best Practice | ianloic.com - The Diigo Meta page

• 30 Aug 07
  

  Ken Wei

  rails ruby security

  • Cross Site Request Forgery is very simple. A malicious site asks the user's browser to carry out an action on a site that the user has an active session on and the victim site carries out that action believing that the user intended that action to occur. In other words the problem arises when a web application relies purely on session cookies to authenticate requests.
• 23 Aug 07
  

  A. D.

  ror security

• 19 Jul 07
  

  clarify

  rails forms security toread

• 05 Jun 07
  

  M G

  Cross Site Request Forgery web app vulnerability (using existing open session)

• 

  Jan Kujawa
• 

  znarfor

  imported rails csrf security

• 19 May 07
  

  harry
  • SRF is the new bad guy in web application security. Everyone has worked out how to protect their SQL database from malicious input, and RoR saves you from ever having to worry about this. Cross site scripting attacks are dying and the web community even managed to nip most JSON data leaks in the bud.

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.