ankane / secure_rails

Rails security best practices

ankane/secure_rails Issues

ENV variables?
Closed 3 years ago1
Cache-Control headers
Closed 3 years ago1
Per-form CSRF tokens
Closed 5 years ago1
Host header injection
Closed 7 years ago3
Suggested host header injection mitigation does not seem to be working
Closed 7 years ago3
secure_headers
Closed 8 years ago1
SecureHeaders::Configuration.configure do |config|
Closed 8 years ago1