rails-security

What problem does it solve?

This Skill outlines security best practices for Rails applications, covering authentication, authorization, and protection against common vulnerabilities.

Core Features & Use Cases

• Defense in Depth: Layered security approaches across controllers, models, and APIs.
• Secure Auth & Authorization: Guidance on authentication flows and access control patterns.
• Input Validation & Sanitization: Prevents injection and XSS; use strong parameter patterns.
• API Security: Techniques for secure API endpoints and token handling.

Quick Start

Implement a controller with strong parameters, add a simple Pundit policy for authorization, and enable CSRF protection for HTML endpoints.