tags:

views:

35

answers:

2
Q: 

Things to consider while using session in Rails

Hi, While using session in Rails, what are the things that I have to be careful in perspective of security.?

+2  A: 

There is a good overview in this guide.

Alex - Aotea Studios  2010-07-02 05:47:15
Very useful link - now favourited
Noel Walters  2010-09-08 15:31:35
+1  A: 

There are vulnerabilities affect sessions regardless of what platform you are using.

OWASP Top 10 2010 A3-Broken Authentication and Session Management.

Rook  2010-07-02 08:16:56

related questions

Encryption in C# Web-Services
How Do You Secure database.yml?
ASP.NET LocationProvider
What do you (or your company) use for wiping a machine?
Can a proxy server cache SSL GETs? If not, would response body encryption suffice?
Java: What is the best way to SFTP a file from a server
How do I call a Flex SWF from a remote domain using Flash (AS3) ?
Best way to store a database password in a startup script / config file?
Using VM to get around VPN restrictions
Best references for secure coding practices in ASP.NET and classic ASP.
Secure Memory Allocator in C++
Resolving Session Fixation in JBoss
Best Practices for securing a REST API / web service
Defensive programming
Personal Linux web server
Block user access to internals of a site using HTTP_REFERER
Is there an Unobtrusive Captcha for web forms?
My website got hacked... What should I do?
What all do I need to escape when sending a (My)SQL query?
How do you disable browser Autocomplete on web form field / input tag?
Best .NET obfuscation tools/strategy
Are there best practices for testing security in an Agile development shop?
What is the best way to avoid SQL injection attacks?
Found a critical bug, but the company doesn't care
PHP Session Security