Rails Security

Learn how to secure your Ruby on Rails application from SQL injection, CSRF attacks and more.

6 Lessons | 1h 35m | Intermediate

Strong Passwords with HaveIBeenPwned

Mar 01, 2019 Pro

The HaveIBeenPwned Password API lets us enforce strong passwords and warn users their password has been in a data breach

21m

How Cross-Site Request Forgery (CSRF) Works in Ruby on Rails

Feb 08, 2022 Pro

Ever gotten an InvalidAuthentictyToken error in Rails and wondered how CSRF works? In this lesson, we'll learn how it works behind the scenes so you can understand exactly what's going on.

14m

Mitigating Spammers with Recaptcha

Feb 23, 2016 Pro

Learn how to integrate Google's Recaptcha API into your forms and registration process with Rails

12m

Protecting from XSS with Sanitize

Oct 26, 2016

Protect your Rails application from Cross Site Scripting (XSS) attacks using the sanitize helper

25m

SSRF Protection for Rails

Feb 02, 2026 Pro

Making requests to user-defined URLs can be insecure. DNS can point to your local network and attackers can use this to mess with your internal systems.

11m

Handling Parameter Tampering Safely with Rails

Mar 02, 2026 Pro

Malicious users and bots will always be poking around your applications looking for vulnerabilities, so it's important we safely handle parameters from tampering in Rails.

Learning Ruby on Rails? Join our newsletter.

We won't send you spam. Unsubscribe at any time.

Rails for Beginners

Advanced Ruby: Behind the Magic

Payments with Rails Master Class

Refactoring Rails

Learn Hotwire

Install and Deploy Rails Guides

Hatchbox.io

Jumpstart Rails SaaS Template

Remote Ruby Podcast

GoRails Open Source

Rails Hackathon

Beginner Bounties

Ruby on Rails Job Board