Skip to content

Commit

Permalink
Security doc multiline update (#45)
Browse files Browse the repository at this point in the history
  • Loading branch information
SammySteiner authored Jun 28, 2024
1 parent 4f8e5f7 commit 4220508
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/app-rails/application-security.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ There is currently no file upload or download functionality at this time, so ple
- [x] Filter log entries so they do not include passwords or secrets
- Note: Log filtering is set in [filter_parameter_logging.rb](app-rails/config/initializers/filter_parameter_logging.rb): `:passw, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn`.
- [x] Use the correct Ruby REGEX: `\A` and `\z` and not the more common: `/^` and `$/`.
- [ ] Add `multiline: true` to regex `format:` in validations.
- Note: If there is a need to use `/^` and `$/` in the regex, add `multiline: true` to regex `format:` in validations.
- [x] When searching for data belonging to the user, search using Active Record from the user and not from the target data object. ie. Instead of doing: `@task = Task.find(params[:id])`, instead do: `@user.tasks.find(params[:id])`.
- Note: This application is also using [pundit](https://github.com/varvet/pundit) to support resource authorization.

Expand Down

0 comments on commit 4220508

Please sign in to comment.