#345: The Zen Rails Security Checklist for Rails Apps

Jobs

• Ruby on Rails Developer at X-Team (Remote)We seek a developer with extensive Ruby knowledge. We're 100% remote and provide the funding needed to help you achieve your goals and grow. X-Team

Can't find the right job? Want companies to apply to you?Try Hired.com.

In brief

• What Ruby Together Did and Spent in March 2017 news
  If you're wondering what Ruby Together does with its support, here you go (Spoiler: Lots of good stuff.) 
  Ruby Together
• How to Use Domain Model Events to Put Rails on a Diet tutorialvideo
  Handle domain lifecycle events with the Observer Pattern to keep models and controllers skinny. 
  Avdi Grimm
• An Alternate Approach Method of Slimming Down Rails tutorial
  This approach stays much closer to “The Rails Way” by introducing nested controllers. 
  Kyle Weist
• Pry-like Runtime Invocation for IRB tutorial
  Ruby 2.4 adds the ability to open an irb session at runtime with binding.irb 
  Rohit Arolkar
• Add Slack Notifications to an App with Slack-Notifier and Sidekiq tutorial 
  Brittany Martin
• Fixing XXE Vulnerabilities in Nokogiri tutorial
  The popular Nokogiri gem contains a pair of high-severity XXE vulnerabilities. Learn how the exploits work, and how to protect against them. 
  Snyk  Sponsored
• Using Chef and Capistrano to Deploy a Rails App on Ubuntu 16.04 tutorial 
  Kirill Shevchenko
• Recover From Rails Database Schema Conflicts When Rebasing tutorial 
  Duncan G M Stuart
• Using dry-validation as a Schema Validation Layer for Rails API tutorial
  Protect your API from incomplete and invalid requests. 
  Maciej Mensfeld
• 2 Tips for Keeping Your Rails Logs Free of Unwanted Noise tutorial 
  Marian Posaceanu
• Implementing JWT-Based Auth on a Rails RESTful JSON API tutorial 
  Austin Kabiru
• Another Silly Coding Error With case/when story 
  Tom Copeland
• How to Use Vue.js and Turbolinks Together video 
  GoRails
• OpsCare: an out-source DevOps solution that just works! tools
  We’ve solved the problems with ROR DevOps. Start enjoying 24/7, trouble free OpsCare® by reinteractive. 
  Reinteractive  Sponsored
• OpeningAct: Speed Up Your Sinatra Development with Templates tools 
  Sun-Li Beatteay
• Byebug: A Feature Rich Debugger for Ruby 2 That Uses TracePoint tools 
  David Rodríguez
• Try Codeship Basic: simple hosted CI that works out of the box tools 
  Codeship  Sponsored
• NullDB: An ActiveRecord 'Null Database' Adapter code
  Essentially ‘no-ops’ any database actions for extra speed and isolation in unit tests. 
  Bram de Vries
• etcdv3-ruby: An In-Development Ruby Client for etcd Version 3 code 
  Shaun Davis