RailsConf 2018: The Evolution of Rails Security by Justin Collins

Channel:

Confreaks

Subscribers:

42,400

Published on May 17, 2018 9:33:09 PM ● Video Link: https://www.youtube.com/watch?v=Btrmc1wO3pc

Duration: 37:08

1,706 views

42

RailsConf 2018: The Evolution of Rails Security by Justin Collins

Rails has a reputation for being secure by default, but how deserved is that reputation? Let's take a look back at some of the low points in Rails security history: from the first Rails CVE, to the controversial GitHub mass assignment, the 2013 Rails apocalypse, and more recent remote code execution issues. Then we'll cheer ourselves up with the many cool security features Rails has added over the years! We'll cover auto-escaping, strong parameters, default security headers, secret storage, and less well-known features like per-form CSRF tokens and upcoming Content Security Policy support.