Skip to content

Commit b31b6e6

Browse files
committed
Merge pull request rails#12815 from Adam89/patch-1
Update security.md [ci skip]
2 parents 0bb6b43 + 336caf9 commit b31b6e6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

guides/source/security.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ After reading this guide, you will know:
1717
Introduction
1818
------------
1919

20-
Web application frameworks are made to help developers building web applications. Some of them also help you with securing the web application. In fact one framework is not more secure than another: If you use it correctly, you will be able to build secure apps with many frameworks. Ruby on Rails has some clever helper methods, for example against SQL injection, so that this is hardly a problem. It's nice to see that all of the Rails applications I audited had a good level of security.
20+
Web application frameworks are made to help developers build web applications. Some of them also help you with securing the web application. In fact one framework is not more secure than another: If you use it correctly, you will be able to build secure apps with many frameworks. Ruby on Rails has some clever helper methods, for example against SQL injection, so that this is hardly a problem. It's nice to see that all of the Rails applications I audited had a good level of security.
2121

2222
In general there is no such thing as plug-n-play security. Security depends on the people using the framework, and sometimes on the development method. And it depends on all layers of a web application environment: The back-end storage, the web server and the web application itself (and possibly other layers or applications).
2323

0 commit comments

Comments
 (0)