This perhaps should become a hub for all security-related topics – the question “Does Rails have any known security issues” is going to crop up a lot.
- First and foremost, see Securing your Rails
- Ruby on Rails Security – a wrap-up presentation
- HowToAvoidCrossSiteRequestForgery
- HowToLockDownRailsForDeployment
- HowToPreventFormInjection
- Authentication
- Ruby on Rails Security – Exploring the Security of Rails and friends
- ModelSecurity provides an overview of Rails security concerns
- Some notes on the security of Authentication Systems
- Ruby on Rails Security