Handling SQL injection and XSS in Rails

Submitted by Zach Holman » The unfortunate part about learning a new language or technology is that there's typically little focus on security matters. Rails gives you a lot of time-saving helpers and methods, but you still need to understand where your app might be vulnerable. This is a quick overview of protecting your code against SQL injection attacks and cross-site scripting exploits.