Ruby on rails makes developing powerful web applications really easy. As developers, we must acknowledge that this convenience comes with a significant responsibility to safeguard our users data and ensure the security of our applications once we start to get users for our applications. When it comes to web application security, the Open Web Application Security Project (OWASP) Top 10 known commonly as OWASP Top Ten is a widely recognized reference for identifying and understanding the most critical security risks. In this blog post, We'll delve into each of the OWASP Top 10 items and analyze their potential impact on a Rails application.
The Open Web Application Security Project (OWASP) is a non-profit organization that works to improve web application security. The OWASP Top 10 project identifies and prioritizes the most critical web application security risks. The latest at the time of writing this was OWASP Top ten 2021.
This is a series of posts that will discuss these security vulnerabilities from the perspective of a rails application.
|A01:2021-Broken Access Control
|Broken Access Control: What Is It and Why Does It Matter in your rails application?
|SQL injection in Rails - Learn from an attacker’s shoes
This is a work in progress and I will update the table above as I add more content