Rails' Insecure Defaults

Security