RailsCasts Pro episodes are now free!

Learn more or hide this

Applied Filters: model xFree Episodes xSecurity x
Securing an API
Episode #352May 23, 201274 comments

Securing an API

There are many approaches to locking down an API. Here I start off with HTTP Basic authentication then move on to generating a unique token which can be passed through a URL parameter or HTTP header. (7 minutes)
Hackers Love Mass Assignment
Episode #26May 02, 200767 comments

Hackers Love Mass Assignment

Your site may be at risk! When using mass assignment, you are giving the user complete control over that model and its associations. See how a hacker might use this vulnerability and learn how to stop it in this episode. (6 minutes)