ZaurMolotnikov: Created page with "When securing a rails application it is essential to enforce connection security. Its is done with simple configuration in rails by enabling TLS and forcing it:
2018-02-28T14:56:45Z

Created page with "When securing a rails application it is essential to enforce connection security. Its is done with simple configuration in rails by enabling TLS and forcing it: <syntaxhig..."

New page
When securing a rails application it is essential to enforce connection security.

Its is done with simple configuration in rails by enabling TLS and forcing it:

<syntaxhighlight lang="ruby" line='line'>
# config/environments/production.rb
# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies
config.force_ssl = true
</syntaxhighlight>

Uncomment the line 3 as above in your configuration for production.

Ruby on Rails Connection Security Cheatsheet - Revision history