Ruby security news
Keep up with the programming language’s security, too
Rails security strategy (2015)
Complete Rails guide to developing a security strategy
Security on Rails (2009)
One of the early Rails security books
New Rails security HTTP headers
Some are sent by default in Rails now
Rack::Attack: Rate limits against DDoS and abusive users
Track and throttle requests
Video: The World of Rails Security
RailsConf talk: Introduction to Rails security
Database configuration against SQL injection
The OWASP recommends the least privileges for a DB user
Rails SQL injection cheat sheet
Many examples of what NOT to do
What is Cross Site Scripting (XSS)?
The number 3 in the OWASP Top Ten web application vulnerabilities
OWASP XSS Prevention Cheat Sheet
A Cross Site Scripting cheat sheet by the Open web application security project
