secure_rails
SecureHeaders
| secure_rails | SecureHeaders | |
|---|---|---|
| 4 | 2 | |
| 976 | 3,128 | |
| - | 0.3% | |
| 0.0 | 4.2 | |
| about 1 year ago | 8 months ago | |
| Ruby | ||
| Creative Commons Zero v1.0 Universal | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
secure_rails
-
Ruby on Rails Security: 8 Best Practices
See also: https://github.com/ankane/secure_rails/blob/master/README.md
-
6 security improvements in Rails 7
See also: ankane/secure_rails Rails security Best Practices
- How to make Rails app secure?
-
Rails application boilerplate for fast MVP development
update with rails production best practices, security best practices and rails-security-checklist
SecureHeaders
-
4 Essential Security Tools To Level Up Your Rails Security
The secure_headers gem will automatically apply several headers that are related to security. This includes:
-
Rails application boilerplate for fast MVP development
add secure_headers
What are some alternatives?
Metasploit - Metasploit Framework
Rack::Protection - NOTE: This project has been merged upstream to sinatra/sinatra
BeEF - The Browser Exploitation Framework Project
Rack::ContentSecurityPolicy
RbNaCl - Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
Hashids - A small Ruby gem to generate YouTube-like hashes from one or many numbers. Use hashids when you do not want to expose your database ids to the user.
Rack::Attack - Rack middleware for blocking & throttling
Clamby - ClamAV interface to your Ruby on Rails project.
Brakeman - A static analysis security vulnerability scanner for Ruby on Rails applications
Rack::JsonWebTokenAuth
Rack::UTF8Sanitizer - Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8 characters in request URI and headers.
Gitrob - Reconnaissance tool for GitHub organizations