Security Tools

312

Watchers: 264
Forks: 13
5% Penalty

1. rails_xss

A plugin for rails 2.3 apps which switches the default to escape by default
Last commit: 2 months ago

On the web

GitHub: NZKoz/rails_xss

Documentation

RDoc: rdoc.info/projects/NZKoz/rails_xss

In the news

Rails Summit: resumo do segundo dia 4 months ago

Double Shot #557 5 months ago

311

Watchers: 261
Forks: 10

2. tarantula

a big hairy fuzzy spider that crawls your site, wreaking havoc
Last commit: about 1 month ago

On the web

GitHub: relevance/tarantula

Home: github.com/relevance/tarantula

As a Ruby Gem

Rubyforge: tarantula (Current version: 0.3.3)

gem install tarantula

GitHub: relevance-tarantula (Current version: 0.3.3)

gem install relevance-tarantula --source "http://gems.github.com"

245

Watchers: 185
Forks: 12

3. loofah

HTML/XML manipulation and sanitization based on Nokogiri
Last commit: 2 days ago

On the web

GitHub: flavorjones/loofah

Home: loofah.rubyforge.org/

Documentation

RDoc: rdoc.info/projects/flavorjones/loofah

GitHub Wiki: wiki.github.com/flavorjones/loofah (3 pages)

As a Ruby Gem

Rubyforge: loofah (Current version: 0.4.7)

gem install loofah

In the news

Well, it seems there are no news about flavorjones/loofah yet...

159

Watchers: 113
Forks: 11
5% Penalty

4. xss_terminate

xss_terminate is a plugin in that makes stripping and sanitizing HTML stupid-simple. Install and forget. And forget about forgetting to h() your output, because you won‘t need to anymore.
Last commit: 5 months ago

On the web

GitHub: look/xss_terminate

Home: code.google.com/p/xssterminate/

Documentation

RDoc: rdoc.info/projects/look/xss_terminate

89

Watchers: 74
Forks: 3

5. find_mass_assignment

Find likely mass assignment vulnerabilities
Last commit: about 1 month ago

On the web

GitHub: mhartl/find_mass_assignment

Documentation

RDoc: rdoc.info/projects/mhartl/find_mass_assignment

As a Ruby Gem

GitHub: mhartl-find_mass_assignment (Current version: 1.0)

gem install mhartl-find_mass_assignment --source "http://gems.github.com"

In the news

Double Shot #352 about 1 year ago

45

Watchers: 35
Forks: 2

6. param_protected

Filter unwanted params from your controllers/actions in your Rails app. Provides param_protected and param_accessible analogous to ActiveRecord's attr_protected and attr_accessible.
Last commit: 21 days ago

On the web

GitHub: cjbottaro/param_protected

Home: blog.stochasticbytes.com/2008/01/paramprotected.html

Documentation

RDoc: rdoc.info/projects/cjbottaro/param_protected

As a Ruby Gem

Rubyforge: param_protected (Current version: 1.2.0)

gem install param_protected

GitHub: cjbottaro-param_protected (Current version: 1.1.0)

gem install cjbottaro-param_protected --source "http://gems.github.com"

In the news

Well, it seems there are no news about cjbottaro/param_protected yet...

5

Watchers: 9
Forks: 0
35% Penalty

7. audit_mass_assignment

Checks Ruby on Rails models for use of the attr_accessible white list.
Last commit: about 1 year ago

On the web

GitHub: ryanlowe/audit_mass_assignment

Home: www.disruptiveagility.com/plugin/audit_mass_assignment

Documentation

RDoc: rdoc.info/projects/ryanlowe/audit_mass_assignment

As a Ruby Gem

GitHub: ryanlowe-audit_mass_assignment (Current version: 0.1.5)

gem install ryanlowe-audit_mass_assignment --source "http://gems.github.com"

In the news

Well, it seems there are no news about ryanlowe/audit_mass_assignment yet...

5

Watchers: 8
Forks: 0
35% Penalty

8. xss-shield

Unofficial updated version of the original XSS-Shield plugin at http://code.google.com/p/xss-shield/
Last commit: about 1 year ago

On the web

GitHub: jamestyj/xss-shield

In the news

Well, it seems there are no news about jamestyj/xss-shield yet...

3

Watchers: 5
Forks: 0
35% Penalty

9. cross_site_sniper

Ruby on Rails Plugin that automatically wraps html_escape() around ActiveRecord attribute methods associated with string and text fields in the database.
Last commit: about 1 year ago

On the web

GitHub: wwidea/cross_site_sniper

Documentation

RDoc: rdoc.info/projects/wwidea/cross_site_sniper

In the news

Well, it seems there are no news about wwidea/cross_site_sniper yet...
Category_62