Ruby and Rails developers examine common vulnerabilities through attack and remediation examples. Topics include injection, certificate validation, cryptographic choices, XML processing, directory traversal, cross-site scripting, deserialization, and vulnerable dependencies. The focus is on Ruby-specific practices for building and maintaining applications.

Participants of this course will learn about the following vulnerabilities in Ruby…

• HTTP Header Injection
• OS Injection
• SQL Injection
• Insufficient Certificate Validation
• Use of Insecure Ciphers
• Use of Insecure Digests
• XML External Entities
• Directory Traversal
• Cross-Site Scripting
• Insecure Deserialization
• Using Components with Known Vulnerabilities