Rails Security Pitfalls
sitepoint.com