Rails' Insecure Defaults

SQL Injection