Protecting Your Apps against Cross Site Scripting Attacks


This has been in the news lately, so I wrote up an article about a
method I use to protect my app against XSS attacks. It’s easy to use
if you don’t care how it works, and I go through some of the
metaprogramming techniques I used if you do. Check it out:




Thanks for posting this, it was really informative for those of us
learning Rails and should prove very useful!


Due to the recent increase in spam and falsely sent email, I now PGP
Sign all of my outgoing mail to prove my identity. This means that
you will see an attachment called “PGP.sig” with this message. This
attachment can be used to prove that I am who I say I am. If you are
not familiar with PGP, you can safely ignore it. For more
information, please visit or