5:33 Play Subscribe with or Intro song by Falseta

Episode #280 - June 12th, 2012

2df14bd29ca441a9d4656f0abae2e0ab.jpg?s=18&r=pg&d=http%3a%2f%2fwww.gravatar.com%2favatar%2f8ebf4339f7c8cd73b53d1d1d3eba7c35 Gregg Pollack 9c5541e591a62dd93a2fd2d45b5732dd.jpg?s=18&r=pg&d=http%3a%2f%2fwww.gravatar.com%2favatar%2f8ebf4339f7c8cd73b53d1d1d3eba7c35 Olivier Lacan

Don't get LeakedIn, secure your routes, use your Savon, catch a Tokaido, put your models in a Display Case, and join the Ruby Study Hall.

Subscribe to our mailing list!

This episode is sponsored by Code School. Learn by doing with our interactive Courses and weekly CodeTV screencasts for just $29/month.

  • Code School
  • Insecure Passwords
  • Rails Security
  • Savon 1.0
  • Tokaido Update
  • Display Case
  • Ruby Study Hall
  • Ruby5

Techniques to Secure your Rails app Jump to Story

Jeremy Walker recently posted part 1 of his three part series talking about techniques to secure your Rails website. He talks about a few ways hackers can manipulate data before it hits your server, how Rails protects us from most of these situations, and thow you can protect yourself further. Data manipulation includes things like session hijacking, session fixation attacks, cross-site request forgery, etc. If you use the “match” keyword without specifying the method within your routes then you can call the route using a get GET method which doesn't check for an authenticity token.

November 21st, 2014

RubyConf 2014 wrap-up, accelerating your Rails app, RubyGems.org gets redesigned, Heroku wants you to try HTTP Git, and new versions of Rails were released

November 18th, 2014

This episode covers Ruby 2.1.5, the templating libraries Scribble and Curly, a statically-typed Ruby called Rubysierung and Minitest-Reporters.

November 14th, 2014

Tail call optimizations, keeping migrations healthy, how raptor is so much faster, the psychology of SAAS products, and Ru for your CLI all in this episode of the Ruby5!

November 11, 2014

Command line utilities, autoload paths, a handful of Ruby and Rails releases, security analysis tools, and more on this episode of Ruby5.