Ruby, Rails, and Gems developer tools
Security Resources
Great tools and resources are available to help you write secure Ruby on Rails code. Kurt examines some tools and offers some tips.
I'll admit it: I'm old, and increasingly I find tech trends that surprise me. Ruby on Rails is one of those trends that it seems everyone is using now. A friend gave me a good explanation of why Ruby on Rails has sneaked up on me, despite the fact that it's been around for a decade.
Ruby on Rails is a great prototype system, so it's easy to sell in the sense of "why don't we make a rapid prototype using Rails?" But, of course, once you have a working prototype, you also have something you can sell to customers. So, given a choice between writing a new "real" product or tidying up the prototype and shipping it, people usually pick the second option. Fortunately, Ruby on Rails actually allows for scaling and other production issues, so you can usually get away with this approach.
But, as with any language and framework, the majority of developers using Ruby on Rails are paid to make working code – not secure code. This is unfortunate, because several great resources and tools can help you write secure Ruby on Rails code, and that's where Ruby really shines.
[...]
Buy this article as PDF
(incl. VAT)