See Securing your Rails for a up-to-date and comprehensive examination of dealing with security concerns in Rails.
