Friendly.rbGreg @gregmolnar about how @rails has settings to help with security
#friendlyrb
"Broken Access Control is the most common security problem" - @gregmolnar
- Strong Authorization
- Whitelist approach
- UUIDs are not equal to authorization (UUIDs can be leaked for example)
- Foreign keys (eg. Allow user to set the foreign key for an association
#friendlyrb
- Strong Authorization
- Whitelist approach
- UUIDs are not equal to authorization (UUIDs can be leaked for example)
- Foreign keys (eg. Allow user to set the foreign key for an association
#friendlyrb