Chapter 17: Robust Web Application Security
Security is one of the most important considerations when developing a web application. In this chapter, you'll learn about techniques for avoiding common security issues in web applications. Then, you'll learn how to leverage the advanced security techniques provided by the operating system and database to increase the difficulty of attacks, minimize the attack surface, and mitigate damage in the case of a successful attack.
In this chapter, we will cover the following topics:
- Understanding that most security issues in Ruby web applications are high level
- Never trust input
- Performing access control at the highest level possible
- Avoiding injection
- Approaching high-security environments
By the end of this chapter, you'll have a greater understanding of possible security issues in Ruby web applications, as well as how to use both common and advanced techniques to avoid or mitigate them.
