Are there any security test plugins for rails? [closed]

Question

Are there any tools to test the security of your rails application?

Things that can automatically test sql injection, cross-site scripting, etc...

Answer 1

I'm not sure if there are any plugins out there for testing the security of your code, but here's some reading about the potential pitfalls and the fixes required for Rails apps:

1. Quark Ruby: Ruby on Rails Security Guide
2. Official Ruby on Rails Security Guide

Answer 2

Safe ERB is a plugin that will raise an exception for any unescaped strings in your view templates i.e. dynamic data not escaped using the "h" method.