TL;DR This post explains how to check your Rails application source code for cross site scripting (XSS) attack. Cross site scripting means that your application accepts html code as user…
TL;DR Using this excellent post by Marcel Gehlen , I am learning about exploratory software testing. I created github wiki where I put notes about every resource listed in that post. This…
Ruby on Rails, security, security testing
TL;DR This post is about checking “The Gates” of your Rails application. Every web application is a set of urls. Some of them are publically available and some are available…
BBST, learn testing, Uncategorized
TL;DR After taking state of the art software learning courses, I concluded that best way to comprehend knowledge is to learn by using examples of presented materials. How to measure…
Ruby on Rails, security, security testing, Uncategorized
TL;DR This post will explain how to check your Ruby on Rails code base against sql injections [Wikipedia]. After you have read Wikipedia source link about sql injections, you are…
OWASP, Ruby on Rails, security
TL;DR This is next post in series about Ruby on Rails security. In previous post I explained how to harden other servers. This time I will explain daily security check…
TL;DR Yesterday I experienced negative Black Swan event. I will described it along with explanation what is Black Swan event. This is explained in the book “The Black Swan (Taleb…
