rails-37-style-infrastructure-and-testing-security-checklist

What problem does it solve?

This Skill provides a comprehensive checklist and practical code examples to help developers identify and mitigate common security vulnerabilities in Rails applications, ensuring a more robust and secure development process.

Core Features & Use Cases

• XSS Prevention: Guidance on escaping user input to prevent Cross-Site Scripting attacks.
• CSRF Protection: Strategies for defending against Cross-Site Request Forgery, including using Sec-Fetch-Site headers.
• SSRF Mitigation: Techniques to prevent Server-Side Request Forgery by validating user-provided URLs and blocking private networks.
• Rate Limiting: Implementation of rate limiting for sensitive endpoints to prevent abuse.
• Authorization Patterns: Best practices for implementing consistent and readable authorization logic.
• Use Case: A developer can use this skill to quickly audit their Rails application for common security flaws before deployment, ensuring critical vulnerabilities like XSS and CSRF are addressed.

Quick Start

Review the security checklist for XSS prevention and CSRF protection in Rails.