--- title: "Safety in Ruby on Rails - Ventas de Seguridad" description: "The latest news for Latin American integrators, contractors and wholesalers in electronic security." url: "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" date: "2026-07-23T19:38:54+00:00" language: "en-GB" --- # [ Safety in Ruby on Rails](https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html "Safety in Ruby on Rails") Details 23 October 2010 Ruby on Rails (RoR or simply Rails) is a development framework for open source Web applications that is enjoying great popularity in recent years. Rails follows the paradigm of the Model View Controller (MVC) architecture and is characterized by a high level of productivity compared to its learning curve. It is based on two principles, "Do not repeat yourself", i.e. definitions should be made only once and "Convention on configuration", which refers to the Ruby on Rails (RoR or simply Rails) is a development framework for open source Web applications that is enjoying great popularity in recent years. Rails follows the paradigm of the Model View Controller (MVC) architecture and is characterized by a high level of productivity compared to its learning curve. It is based on two principles, "Do not repeat yourself", that is, definitions should be made only once and "Convention on configuration", which refers to the fact that the programmer only needs to define that configuration that is not conventional.Since its conception at the end of 2005, Rails has evolved supported by a growing number of developers to become a solid, scalable, well-documented Web programming framework, prepared for the business environment and with a security awareness that already pointed ways from its origins. Currently, although the latest available version of Rails is 2.3.5, the jump to the new generation (version 3) after the merger with Merb -- another Web development framework on Ruby -- seems imminent, and given the degree of progress of the project, it is expected to occur throughout this year 2010. From the point of view of safety, the new generation of Rails offers interesting possibilities, such as the use of custom middleware using rack (http://guides.rails.info/rails\_on\_rack.html), in addition to officially incorporating solutions that in previous versions of rails were implemented in plugins. Whether we are developing with Rails in the 2.3.x branch or if we have in mind to undertake the migration or the development of a new business application based on version 3 of Rails, there are a number of considerations that we must take into account if we want to implement an adequate level of security in our Web application. - Publicidad - First, we will see some of the typical mistakes that are made during development and that will have implications to a greater or lesser extent on the security of our application. Needless to say, the examples used are very simplified to facilitate their understanding. The second part of this document provides recommendations and considerations to be taken into account during development. In addition, some solutions available in the form of plugins that will contribute to improving the security of applications developed with Rails are discussed. **[See original.](http://feedproxy.google.com/~r/NoticiasSeguridadInformatica/~3/EPA2-Wj9k_M/seguridad-en-ruby-on-rails.html "Seguridad en Ruby on Rails")** ### No comments • If you're already registered, please log in first. Your email will not be published. ### Comments are closed The comments for this content are closed. ## Schema ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Inicio", "item": "https://www.ventasdeseguridad.com/en" }, { "@type": "ListItem", "position": 2, "name": "Latest News", "item": "https://www.ventasdeseguridad.com/en/news/latest-news.html" }, { "@type": "ListItem", "position": 3, "name": "Cyber Security", "item": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security.html" }, { "@type": "ListItem", "position": 4, "name": "Safety in Ruby on Rails", "item": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" } ] } ``` ```json { "@context": "https://schema.org", "@type": "VideoObject", "name": "Safety in Ruby on Rails", "description": "Ruby on Rails (RoR or simply Rails) is a development framework for open source Web applications that is enjoying great popularity in recent years. Rails follows the paradigm of the Model View Controller (MVC) architecture and is characterized by a high level of productivity compared to its learning curve. It is based on two principles, "Do not repeat yourself", i.e. definitions should be made only once and "Convention on configuration", which refers to the", "thumbnailUrl": "https://www.ventasdeseguridad.com/", "uploadDate": "2010-10-23T13:52:00-05:00", "contentUrl": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" } ``` ```json { "@context": "https://schema.org", "@type": "NewsArticle", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" }, "headline": "Safety in Ruby on Rails - Ventas de Seguridad", "description": "The latest news for Latin American integrators, contractors and wholesalers in electronic security.", "image": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/" }, "publisher": { "@type": "Organization", "name": "Ventas de Seguridad", "logo": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/vds.png" } }, "author": { "@type": "Person", "name": "Max Jaramillo", "url": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" }, "datePublished": "2010-10-23T13:52:00-05:00", "dateCreated": "2010-10-23T13:52:00-05:00", "dateModified": "2022-04-25T18:23:07-05:00" } ``` ```json { "@context": "https://schema.org", "@type": "Article", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" }, "headline": "Latest News", "description": "The latest news for Latin American integrators, contractors and wholesalers in electronic security.", "image": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/vds.png" }, "publisher": { "@type": "Organization", "name": "Latin Press, Inc.", "logo": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/lpi-eventos-online.png" } }, "author": { "@type": "Person", "name": "Ventas de Seguridad", "url": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14378-safety-in-ruby-on-rails.html" } } ```