6 March 2019 by Igor Springer on Ruby on Rails, Security

Why don’t we validate controller parameters?

Using strong parameters in Ruby on Rails applications to allow permitted values is usually not enough. Taking care of validating allowed values to make our applications is also important to make them more secure and less error-prone. To handle the validation properly we can write custom solution(s) or use handy gems like apipie-rails.

Common mistakes that cause Ruby on Rails apps outages

Everybody makes mistakes. Some of them are caught early in a deployment pipeline: during writing code, testing it locally or code review process. Unfortunately, some hide cleverly and pop up on the production environment.

`ActiveSupport::ArrayInquirer` and even more Rails magic

In the previous article, we dived into ActiveSupport::StringInquirer class and superpowers it gives to String objects. After I had published that article I decided to take another look at the ActiveSupport module and to my surprise, I found something even more interesting, ActiveSupport::ArrayInquirer class.